15. Prohibition on processing without registration

15.—

1. Except as provided in this section, personal data shall not be processed by a data controller unless the registration particulars of that data controller are included in the register maintained under section 17 (or is treated by virtue of regulations made under section 16(3) as being so included).

2. Subsection (1) does not apply to—

(a) processing; or

(b) data controllers, of a particular description specified by the Minister, after consultation with the Commissioner, for the purposes of this section by order published in the Gazette and subject to affirmative resolution, being processing which it appears to the Minister is unlikely to prejudice the rights and freedoms of data subjects.