Data controllers and data processors of major importance shall register with the Commission within six months after the commencement of the Act or on becoming a data controller or data processor of major importance.

Registration under subsection (1) shall be made by notifying the Commission of — (a) the name and address of the data controller or data processor, and name and address of the data protection officer of the data controller or data processor; (b) a...

A data controller or data processor of major importance shall notify the Commission of any significant change to the information submitted under subsection (2) within 60 days after such change.

The Commission shall maintain and publish on its website a register of duly registered data controllers and data processors of major importance.

A data controller or data processor shall be removed from the register of the Commission, where it notifies the Commission that it has ceased to operate as a data controller or data processor of major importance.

The Commission may exempt a class of data controllers or data processors of major importance from the registration requirements of this section, where it considers such requirement to be unnecessary or disproportionate.