Providers of cloud computing services and entities that exercise direct and effective control over certain types of data must undergo a registration with the Communications and Information Technology Commission. 