data subject have not been provided by the data controller; and (c) in the opinion of the Commission, the person making the application for registration does not merit the grant of the registration. (2) Where the Commission refuses an application for registration as a data controller, the Commission shall inform the applicant in writing within fourteen days (a) of its decision and the reasons for the refusal, and (b) the applicant may apply for judicial review to the High Court against the refusal. (3) A refusal of an application for registration is not a bar to reapplication. Grant of registration 49. (1) The Commission shall (a) register an applicant if it is satisfied that the applicant has satisfied the conditions required for registration, and (b) provide the applicant with a certification of registration upon approval of the application. (2) The applicant shall pay the prescribed fee upon registration. Renewal of registration 50. A registration shall be renewed every two years. Removal from Register 51. The Commission may at the request of the person to whom an entry in the Register relates, remove that person’s name from the Register at any time. Cancellation of registration 52. The Commission has the power to cancel a registration for good cause. Processing of personal data without registration prohibited 53. A data controller who has not been registered under this Act shall not process personal data. Access by the public 54. (1) The Commission shall provide facilities to make the information contained in the Register available for inspection by members of the public. (2) The Commission shall supply a member of the public with a duly certified manual or electronic copy of the particulars contained in an entry made in the Register on payment of the prescribed fee.