[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 634 ACT communication, indicating the communication’s origin, destination, route, time, date, size, duration, or type of underlying service. Application 3. This Act applies to the processing of data through automatic or semi-automatic means, and to the processing of data through non-automatic means within Seychelles, which data forms part of a filing system whether managed by a private or public data controller. Exemptions 4. This Act does not apply to — (a) the processing of personal data by relevant authorities in the course of a criminal investigation; (b) matters that pertain to national security; or (c) processing of personal data by a natural person for a personal activity. PART II - INFORMATION COMMISSION Information Commission 5.(1) The Information Commission is the competent authority to enforce and implement this Act. (2) Any function of the Commission under this Act and under any regulations made under this Act may, to the extent authorised by the Commission, be performed by any officer of the Commission. (3) In order to implement this Act, the Commission shall appoint its own officers and staff who may be public servants, consultants or such other persons as the Commission may consider necessary. Powers and duties of the Commission 6.(1) The Powers and duties of the Commission under this Act include, among others —