{"id":911490,"url":"http://info.mzalendo.com/api/v0.1/hansard/entries/911490/?format=json","text_counter":430,"type":"other","speaker_name":"","speaker_title":"","speaker":null,"content":"(1) A data controller or data processor required to register under section 3A shall apply to the Commission for registration. (2) An application under subsection(1) shall provide the following particulars- (a) a description of the personal data to be processed; (b) a description of the purpose for which the personal data is to be processed; (c) the category of data subjects to which the personal data relates; (d) contact details of the data controller or data processor; (e) a general description of the risks, safeguards, security measures and mechanisms to ensure the protection of personal data; and (f) any other details as may be prescribed by the Commisson. (3) The Commission shall issue a certificate of registration where a data controller or data processor meets the requirements for registration. (4) A data controller or data processor shall notify the Commission of a change in any particular outlined under subsection (2). (5) On receipt of a notification under subsection (4), the Commission shall amend the respective entry in the register."}