(1) An application for registration as a data controller must be made in writing to the Commissioner and the person shall furnish the particulars required under section 49(a), (c), (d), (e) and (f).
(2) Subject to subsection (3), the Commissioner shall grant an application for registration, unless the Commissioner reasonably believes that —
(a) the particulars proposed for inclusion in an entry in the register are insufficient or any other information required by the Commissioner either has not been furnished, or is insufficient;
(b) appropriate safeguards for the protection of the privacy of the data subjects concerned are not being, or will not continue to be, provided by the data controller; or
(c) the person applying for registration is not a fit and proper person in the determination of the Commissioner.
(3) On registration as a data controller, the applicant shall pay the prescribed fee.
(4) Where the Commissioner refuses an application for registration, the Commissioner shall, as soon as reasonably practicable notify, in writing, the applicant of the refusal —
(a) specifying the reasons for the refusal; and
(b) informing the applicant that he or she may appeal against the refusal under section 69.