15. Application for registration 16. Issue of registration certificate 17. Change in particulars 18. Renewal of registration certificate 19. Cancellation or variation of terms and conditions of registration certificate 20. Register of controllers and processors PART IV – OBLIGATIONS ON CONTROLLERS AND PROCESSORS 21. Principles relating to processing of personal data 22. Duties of controller 23. Collection of personal data 24. Conditions for consent 25. Notification of personal data breach 26. Communication of personal data breach to data subject 27. Duty to destroy personal data 28. Lawful processing 29. Special categories of personal data 30. Personal data of child 31. Security of processing 32. Prior security check 33. Record of processing operations PART V – PROCESSING OPERATIONS LIKELY TO