34. Authority may issue licences

The Authority may, issue licences to controllers or processors requiring a licence based on the recommendations of the advisory committee, for the purpose of regulating identity management and related services provided to data subjects under any written law.

The recommendations of the advisory committee shall identify criteria and define categories of processing by controllers or processors requiring a licence.

The categories, criteria, terms and conditions, form and duration, procedure for application, renewal, suspension, cancellation, relating to such licences, appeal against the refusal, suspension or cancallation of licence and fees to be charged may be prescribed.

The Authority may, review and monitor the compliance of such controllers or processors with applicable terms and conditions of such licences.