Personal Data Protection (Collection and Processing) Regulations, registration of controllers and processors
Personal Data Protection (Personal Data Collection and Processing) Regulations 2023 (GN No. 449C of 2023), regs. 4, 7, 8 and 10 (registration)
In force since .
A comprehensive regime rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Licensing
As of .
What it requires
- This binds a data controller or data processor, meaning anyone who collects or processes personal data. The Regulations have applied since .
- Register with the Personal Data Protection Commission before you collect or process personal data, applying on Form 1 and paying the fee in the Second Schedule (regulation 4).
- Renew the registration by applying within the three months before it expires, since it is valid for five years; if you miss that period, apply for a new registration (regulations 7 and 8).
- Notify the Commission in writing within fourteen days after any change of the information entered in the register (regulation 10).
These lines are LexLint's reading of the law's text, as of .
What this law does
The Personal Data Protection (Personal Data Collection and Processing) Regulations, 2023 were published as Government Notice 449C on . A person may not collect or process personal data without being registered with the Commission as a data controller or data processor. A person who intends to collect or process personal data applies to the Commission on Form 1 and pays the fees in the Second Schedule.
A registration is valid for five years from the date the registration certificate is issued. A controller or processor may renew the registration by applying to the Commission within three months before the date of expiry. A controller or processor that misses the renewal period must apply for a new registration. A controller or processor must notify the Commission in writing within fourteen days after any change of the information entered in the register.
When LexLint raises it
When your app profile says your app crawls the web, trains models, deploys a chatbot or sends automated outreach.