Where the data subject is a child, incapable of exercising the rights as enumerated in this
Proclamation, the provisions of the Civil Code on guardian, tutor or legal administrator shall
be applicable accordingly.
CHAPTER FIVE
DATA CONTROLLERS AND DATA PROCESSORS
Section One
Registration of Data Controllers and Data Processors
44.
(1)
(2)
(3)
45.
(1)
(2)
(3)
46.
(1)
(2)
(3)
47.
(1)
(2)
Registration
In order to process personal data the data controller or the data processor shall be
registered with the Commission.
Where a data controller or data processor intends to process personal data for two or
more purposes, the Commission shall make separate entries for each purpose in the
Register.
The Commission may determine the requirements for registration by a directive.
Power to Refuse Registration
The Commission shall not grant an application for registration under this Proclamation
where the particulars provided for inclusion in an entry in the Register are insufficient.
Where the Commission refuses an application for registration as a data controller, the
Commission shall inform the applicant in writing within fourteen days of its decision
and the reasons for the refusal, and
A refusal of an application for registration is not a bar to re-application.
Effects of Registration
The Commission shall enter the application in the Register if it is satisfied that the
conditions required for registration are met.
The Commission shall issue a certificate of registration which is valid for a period of two
years; the certificate shall be renewed every two years.
The Commission may determine the requirements for certificate of registration by a
directive.
Duty to Notify Change
Data controllers shall have the duty to notify to the Commission matters relating to
changes made to the registrable particulars stipulated under Article 46 of this
Proclamation.
On receiving any notification, the Commission shall make such amendments of the
relevant entry in the Register as are necessary.
21