48. Removal from Register A person who wants the removal of its registration may request the Commission such removal to be effected from the Register. 49. (1) Cancellation of Registration The Commission has the power to cancel a registration or vary its terms and conditions where (a) (2) any information given to it by the applicant is false or misleading in any material particular; or (b) the holder of the registration certificate fails, without lawful excuse, to comply with any requirement of this Proclamation; or any term or condition specified in the certificate. The Commission shall, before cancelling or varying the terms and conditions of a registration certificate, require, by notice in writing, the holder of the certificate to show cause, within 21 days of the notice, why the registration certificate should not be cancelled or its terms and conditions should not be varied. 50. (1) (2) 51. (1) (2) (3) Access by the Public The Commission: (a) shall provide facilities for making the information contained in the Register available for inspection by members of the public at all reasonable hours; and (b) may provide such other facilities. The Commission shall supply any member of the public with a duly certified copy in writing of the particulars contained in the Register. Data Protection Officer A data controller or data processor shall designate or appoint a data protection officer on such terms and conditions as the data controller or data processor may determine, where: (a) the processing is carried out by a public body, except for courts acting in their judicial capacity; (b) the core activities of the data controller or data processor consist of processing operations which, by virtue of their nature, scope or purposes, require regular and systematic monitoring of data subjects on a large scale; or (c) the core activities of the data controller or the data processor consist of processing on a large scale of sensitive personal data. A group of entities may appoint a single data protection officer provided that such officer is easily accessible by each entity. Where a data controller or a data processor is a public body, a single data protection officer may be designated for several such public bodies, taking into account their organizational structures. 22