Registration under subsection (1) shall be made by notifying the Commission of —

(a) the name and address of the data controller or data processor, and name and address of the data protection officer of the data controller or data processor;

(b) a description of personal data and the categories and number of data subjects to which the personal data relate;

(c) the purposes for which personal data is processed;

(d) the categories of recipients to whom the data controller or data processor intends or is likely to disclose personal data;

(e) the name and address, or name and address of any representative of any data processor operating directly or indirectly on its behalf;

(f ) the country to which the data controller or data processor intends, directly or indirectly to transfer the personal data;

(g) a general description of the risks, safeguards, security measures and mechanisms to ensure the protection of the personal data; and

(h) any other information required by the Commission.