(2)
Any data controller who, knowingly supplies false information under
subsection (1), shall commit an offence and shall, on conviction, be liable
to a fine not exceeding 100,000 rupees and to imprisonment for a term
not exceeding 2 years.
(3)
Where the data controller in respect of whom there is an entry in the
register changes his address, he shall, within 15 days of the change in
address, notify the Commissioner in writing.
Amended by [Act No. 1 of 2009]
35A. Particulars to be furnished by data processor
(1)
A data processor who applies for registration under section 34
shall provide the following particulars –
(a)
his name and address;
(b)
a description of the personal data being, or to be
processed, and the category of data subjects to which the
personal data relate;
(c)
the country to which he transfers, or intends to transfer, the
personal data;
(d)
a statement as to whether or not he processes, or intends
to process, sensitive personal data; and
(e)
(2)
such other particulars as the Commissioner may require.
Any data processor who knowingly supplies false information
under subsection (1) shall commit an offence and shall, on
conviction, be liable to a fine not exceeding 100,000 rupees and
to imprisonment for a term not exceeding 2 years.