287 (3) Subject to subsection (4), a data contloller shall give notice each time personal information is received or processed. (4) Changes in the name or address of the data controller shall be notified within one week, and changes to the notification which concel.rr subsection (2)(b) to (f) shall be notified within one year of the previous notification, if they are of more than incidental importance. (5) Any processing which departs from that which has been notified in accordance with the provisions of subsection (2)(b) to (f) shall be r-ecorded and kept for at least three yeals. (6) The Commission maY - (a) prescribe more detailed rules concelning the procedure for submitting notifications; and (b) by notice exempt celtain categories of information processing which are unlikely to infringe the legitimate interests of a data subject from the notification requilements refened to in this section, (7) The Commission shall maintain an up-to-date register of the information processing notified to it. Codes of conduct 54. (1) The Commission may, from time to time, issue, approve, amend or revoke a code of conduct. (2) A code of conduct shall incorporate measures that give effect to all information protection principles, given the particular features of the sector or sectors of society in which the relevant data controller is operating. (3) A code of conduct may apply in lelation to any one ol: more of the following - (a) specified information ol class of information; (b) specified body or class of bodies;