to imprisonment for a term not exceeding 5 years. 16. Issue of registration certificate (1) Where the Commissioner considers that an applicant meets the criteria to be registered as a controller or processor, as the case may be, he shall grant the application. (2) Where the Commissioner grants an application for registration as a controller or processor, he shall, on such terms and conditions as he may determine, register the applicant as a controller or processor, as the case may be, and issue the applicant, on payment of such fee as may be prescribed, with a registration certificate in such form and manner as the Commissioner may determine. (3) A registration certificate issued under subsection (2) shall be valid for a period of 3 years. 17. Change in particulars (1) Where, following the grant of an application, there is a change in any of the particulars referred to in section 15(2), the controller or processor, shall, within 14 days of the date of the change, notify the Commissioner in writing of the nature and date of the change. (2) On receipt of a notification under subsection (1), the Commissioner, on being satisfied that there is a change in particulars, shall amend the appropriate entry in the register.