REVOCATION OF REGISTRATION

Section 18. Cancellation of registration

(1) The Commissioner may cancel the registration of a user data if the Commissioner is satisfied

     that—

     (a) the data does not comply with any provision of this Act;

     (b) the data does not comply with any conditions or restrictions imposed upon the certificate

     registration is issued;

     (c) the issuance of the certificate of registration was prompted by a false representation of fact by the user

     data data; or

     (d) the data user has ceased to carry on the processing of personal data.

(2) Notwithstanding subsection (1), the Commissioner shall not revoke the registration of a user

     data unless the Commissioner is satisfied that, after giving it the opportunity for data users

     make any representation in writing he may wish to make, registration should be revoked.

(3) If a user registration data is canceled, the Commissioner shall issue a notice

     deregistration to the user data, and a certificate of registration issued in respect

     such registration shall have no effect when the notice of revocation of registration

     it.

(4) A data user whose registration has been canceled under this section and continue

     processing of personal data after it commits an offense and shall, on conviction, to a fine

     not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding three years or to both.