THRESHOLDS FOR MANDATORY REGISTRATION (r. 13(3))

A data controller or data processor processing personal data for the following
purposes shall register as a data controller or a data processor as provided for under these
Regulations—
1. Canvassing political support among the electorate.
2. Crime prevention and prosecution of offenders (including operating security
CCTV systems).
3. Gambling.
4. Operating an educational institution.
5. Health administration and provision of patient care.
6. Hospitality industry firms but excludes tour guides.
7. Property management including the selling of land.
8. Provision of financial services.
9. Telecommunications network or service providers.
10. Businesses that are wholly or mainly in direct marketing.
11. Transport services firms (including online passenger hailing applications)
12. Businesses that process genetic data.