Section 35:

35. Particulars to be furnished by data controller (1) A data controller who applies for registration under section 34 shall provide the following particulars— (a) his name and address; (b) if he has nominated a representative for the purposes of this Act, the name and address of the representative; (c) a description of the personal data being or to be processed by or on behalf of the data controller, and of the category of data subjects, to which the personal data relate; (d) a statement as to whether or not he holds, or is likely to hold, sensitive personal data; (e) a description of the purpose for which the personal data are being or are to be processed; (f) a description of any recipient to whom the data controller intends or may wish to disclose the personal data; (g) the names, or a description of, any country to which the data controller directly or indirectly transfers, or intends or may wish, directly or indirectly, to transfer the data; and (h) the class of data subjects, or where practicable the names of data subjects, in respect of which the data controller holds personal data. (2) Any data controller who knowingly supplies false information under subsection (1) shall commit an offence and shall, on conviction, be liable to a fine not exceeding 100,000 rupees and to imprisonment for a term not exceeding 2 years. (3) Where the data controller in respect of whom there is an entry in the register changes his address, he shall, within 15 days of the change in address, notify the Commissioner in writing. [S. 35 amended by s. 2 (k) of Act 1 of 2009 w.e.f. 22 May 2009.] (S. 35 came into operation on 16 February 2009.)