No. 3
25
Data Protection
significant importance and provide reasons for the refusal, in
writing, to the applicant.
(4) where the authority registers a data controller or data
processor as a data controller of significant importance or data
processor of significant importance in accordance with subsection
(3)(a), the authority shall issue a registration certificate in the
prescribed form to the data controller or data processor.
(5) the authority may impose such terms and conditions on the
registration as it determines appropriate.
(6) a registered data controller of significant importance or data
processor of significant importance shall, where there is a change to
the information provided to the authority during registration, notify
the authority of the change, in writing, within ninety days of the
change.
(7) the authority shall keep and maintain, in the prescribed form,
a register of data controllers of significant importance and data
processors of significant importance.
42.__(1) the authority may suspend or cancel the registration of
a data controller of significant importance or data processor of
significant importance where the authority is satisfied that—
(a) the data controller of significant importance or data
processor of significant importance—
(i) has not complied with any provision of this act or any
term or condition imposed on the registration; or
(ii) made a misleading or false representation at the time of
registration; or
(b) there is any other reasonable ground to suspend or cancel
the registration.
(2) the authority shall not suspend or cancel the registration of a
data controller of significant importance or data processor of
significant importance under subsection (1), unless the data
controller of significant importance or data processor of significant
importance has been given an opportunity to show cause why the
registration should not be suspended or cancelled.
suspension or
cancellation
of registration
43. the Minister may, by order published in the Gazette, exemptions
exempt a class of data controllers of significant importance or data
processors of significant importance from the registration
requirement under this Part.