data subject have not been provided by the data controller; and
(c) in the opinion of the Commission, the person making the
application for registration does not merit the grant of the
registration.
(2) Where the Commission refuses an application for registration as a data
controller, the Commission shall inform the applicant in writing within fourteen
days
(a) of its decision and the reasons for the refusal, and
(b) the applicant may apply for judicial review to the High Court against
the refusal.
(3) A refusal of an application for registration is not a bar to reapplication.
Grant of registration
49. (1) The Commission shall
(a) register an applicant if it is satisfied that the applicant has satisfied
the conditions required for registration, and
(b) provide the applicant with a certification of registration upon
approval of the application.
(2) The applicant shall pay the prescribed fee upon registration.
Renewal of registration
50. A registration shall be renewed every two years.
Removal from Register
51. The Commission may at the request of the person to whom an entry in
the Register relates, remove that person’s name from the Register at any time.
Cancellation of registration
52. The Commission has the power to cancel a registration for good cause.
Processing of personal data without registration prohibited
53. A data controller who has not been registered under this Act shall not
process personal data.
Access by the public
54. (1) The Commission shall provide facilities to make the information
contained in the Register available for inspection by members of the public. (2)
The Commission shall supply a member of the public with a
duly certified manual or electronic copy of the particulars contained in an
entry made in the Register on payment of the prescribed fee.