The Act provides for the establishment of a Data Protection Register which is to be maintained by the DPC and to which data controllers must compulsorily register.
Registration as a data controller is subject to renewal every two years (section 50).