Subject to section 44, no person may act as a controller or processor unless registered with the Commissioner. The application, on the Commissioner's approved form, gives the applicant's name and address, any nominated representative, a description of the personal data processed and the categories of data subjects, whether special categories are or are likely to be held, the purposes, any intended recipients, any country to which the data may be transferred directly or indirectly, and a general description of the risks, safeguards, security measures and mechanisms protecting the data. Knowingly supplying false or misleading particulars is an offence (fine up to Rs 100,000, up to 5 years).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.