Data Protection Act, 1988 28 of 50 Regulations for registration. https://www.irishstatutebook.ie/eli/1988/act/25/enacted/en/print.html?printonload=true 20.—(1) The following matters, and such other matters (if any) as may be necessary or expedient for the purpose of enabling sections 16 to 19 of this Act to have full effect, may be prescribed: (a) the procedure to be followed in relation to applications by persons for registration, continuance of registration or alteration of the particulars in an entry in the register or for withdrawal of such applications, (b) the information required to be furnished to the Commissioner by such persons, and (c) the particulars to be included in entries in the register, and different provision may be made in relation to the matters aforesaid as respects different categories of persons. (2) A person who in purported compliance with a requirement prescribed under this section furnishes information to the Commissioner that the person knows to be false or misleading in a material respect shall be guilty of an offence. Miscellaneous Unauthorised disclosure by data processor. 21.—(1) Personal data processed by a data processor shall not be disclosed by him, or by an employee or agent of his, without the prior authority of the data controller on behalf of whom the data are processed. (2) A person who knowingly contravenes subsection (1) of this section shall be guilty of an offence. Disclosure of personal 22.—(1) A person who— data obtained without authority. (a) obtains access to personal data, or obtains any information constituting such data, without the prior authority of the data controller or data processor by whom the data are kept, and (b) discloses the data or information to another person, shall be guilty of an offence. (2) Subsection (1) of this section does not apply to a person who is an employee or agent of the data controller or data processor concerned. 21.02.23, 18:36