Section 16. The certificate of registration

(1) After due consideration be given to an application under subsection 15 (1),

     Commissioner may—

     (a) register the applicant and issue a certificate of registration to the applicant in

     apa-any other form specified by the Commissioner; or

     (b) reject the application.

(2) The certificate of registration shall be issued subject to such conditions or restrictions as it deems

     appropriate to apply by the Commissioner.

(3) If the Registrar refuses an application for registration pursuant to subsection (1), he shall

     inform the applicant through a written notice that the application is refused and the reasons


(4) A person who is in a class of data users specified in an order made

     under subsection 14 (1) and the processing of personal data without a certificate of registration

     issued pursuant to paragraph 16 (1) (a) commits an offense and shall, on conviction, to a fine

     not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding three years or to both.