purposes of this Act, the name and address of the representative; (c) a description of the personal data to be processed by the controller or processor, and of the category of data subjects, to which the personal data relate; (d) a statement as to whether or not he or it holds, or is likely to hold, special categories of personal data; (e) a description of the purpose for which the personal data are to be processed; (f) a description of any recipient to whom the controller intends or may wish to disclose the personal data; (g) the name, or a description of, any country to which the proposed controller intends or may wish, directly or indirectly, to transfer the data; and (h) a general description of the risks, safeguards, security measures and mechanisms to ensure the protection of the personal data. (3) Any controller or processor who knowingly supplies any information under subsection (1) which is false or misleading in a material particular shall commit an offence and shall, on conviction, be liable to a fine not exceeding 100, 000 rupees and