Personal Data Protection Act GN. NO. 395B (Contd) Staff of Commission 13.-(1) The Commission shall, subject to the laws governing public service, employ other officers and employees of such number as may be necessary for the effective discharge of the functions of the Commission. (2) The Commission may appoint consultants and experts in various disciplines on such terms and conditions as the Commission may determine. PART III REGISTRATION OF DATA CONTROLLERS AND DATA PROCESSORS Registration of data controllers and data processors 14.-(1) A person shall not collect or process personal data without being registered as a data controller or a data processor under this Act. (2) A person who intends to collect or process personal data shall apply to the Commission for registration. (3) The Commission may, within a period specified in the regulations, grant or reject the application submitted under subsection (2). (4) The Commission shall issue a certificate of registration to the data controller or data processor who has fulfilled the prescribed requirements and registered under this section. (5) Where the Commission rejects an application it shall inform the applicant in writing and give reasons for the decision. Register of data controllers and data processors 15.-(1) The Commission shall establish and maintain a register of data controllers and data processors registered in accordance with this Act. (2) The register shall contain such particulars as may be prescribed in the regulations. (3) A data controller or data processor may, at any time, apply to the Commission to update or change any particulars in the register. 13