Section 16
Certificate of registration
of Personal Data Protection Act 2010
After having given due consideration to an application under subsection 15(1), the Commissioner may—
(a)
register the applicant and issue a certificate of registration to the applicant in such form as determined by the
Commissioner; or
(b)
refuse the application.
(2)
The certificate of registration may be issued subject to such conditions or restrictions as the Commissioner may think fit to impose.
(3)
Where the Commissioner refuses the application for registration in pursuance of subsection (1), he shall inform the applicant by a written notice that the application has been refused and the reasons for the refusal.
(4)
A person who belongs to the class of data users as specified in the order made under subsection 14(1) and who processes personal data without a certificate of registration issued in pursuance of paragraph 16(1)(a) commits an offence and shall, on conviction, be liable to a fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding three years or to both.