a) inform the Authority of the transfer; and b) in addition to providing the information referred to in article 18, inform the data subject of the transfer and on the compelling legitimate interests pursued. CHAPTER VII—REGISTRATION AND FEES Article 32: Registration of data controllers of major importance 1. All data controllers of major importance shall register with the Authority within six months after qualifying as a data controller of major importance under this Law. 2. Registration under sub-article 1 shall be made by notifying the Authority of: a) its name and address and the name and contact information of its data protection officer; b) a description of the personal data with respect to which it is a data controller of major importance; c) the categories and number of data subjects to which the personal data relate; d) the purposes for which the personal data is or is intended to be processed; e) the categories of recipients to whom the personal data is or is intended to be disclosed; f) any international organisation or jurisdiction outside of the Federal Republic of Somalia to which the personal data is transferred or intended to be transferred; g) a general description of the risks, safeguards, security measures and mechanisms to ensure the protection of the personal data; and h) any other information required by the Authority. 3. A data controller of major importance shall update its registration annually. 4. The Authority shall maintain the currency of and publish on its website a register of data controllers of major importance that have duly registered with it under this article. 5. The General Manager may in a bylaw exempt a class of data controller of major importance from the registration requirement of this article where he or she considers such requirement to be unnecessary or disproportionate or outweighed by considerations in the public interest. 25