(2) Any data controller who, knowingly supplies false information under subsection (1), shall commit an offence and shall, on conviction, be liable to a fine not exceeding 100,000 rupees and to imprisonment for a term not exceeding 2 years. (3) Where the data controller in respect of whom there is an entry in the register changes his address, he shall, within 15 days of the change in address, notify the Commissioner in writing. Amended by [Act No. 1 of 2009] 35A. Particulars to be furnished by data processor (1) A data processor who applies for registration under section 34 shall provide the following particulars – (a) his name and address; (b) a description of the personal data being, or to be processed, and the category of data subjects to which the personal data relate; (c) the country to which he transfers, or intends to transfer, the personal data; (d) a statement as to whether or not he processes, or intends to process, sensitive personal data; and (e) (2) such other particulars as the Commissioner may require. Any data processor who knowingly supplies false information under subsection (1) shall commit an offence and shall, on conviction, be liable to a fine not exceeding 100,000 rupees and to imprisonment for a term not exceeding 2 years.