Personal Data Protection Act 2010 · Updated to 15 Sep 2026 · Part XI · Savings and Transitional Provisions
Section 146
Feedback & supportSubject to subsection (2), any person who at the date of coming into operation of this Act either alone or jointly or in common with other persons processes any personal data or has control over or authorizes the processing of any personal data, shall within three months from the date of coming into operation of this Act be registered as a data controller in accordance with the provisions of this Act.
this Act
“this Act” includes regulations, orders, notifications and other subsidiary legislation made under this Act;
Subsection (1) shall not apply to a data controller who does not belong to the class of data controllers who shall be required to be registered as data controllers in pursuance of the provisions of Division 2 of Part II.
*NOTE—see section 14 of the Personal Data Protection (Amendment) Act 2024
personal data
“personal data” means any information in respect of commercial transactions, which— (a) is being processed wholly or partly by means of equipment operating automatically in response to instructions given for that purpose; (b) is recorded with the intention that it should wholly or partly be processed by means of such equipment; or (c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any sensitive personal data and expression of opinion about the data subject; but does not include any information that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010;
[Act A1727] w.e.f 1 January 2025 which provides the following provision:
Saving