Data Protection And Privacy Act Act (c) 2019 further processing is necessary (i) for the prevention, detection, investigation, prosecution or punishment for an offence or breach of law; (ii) for the enforcement pecuniary penalty; of a law which imposes a (iii) for the enforcement of legislation that concerns protection of public revenue collection; (iv) for the conduct of proceedings before any court or tribunal that have commenced; (v) for the protection of national security; or (vi) to prevent or mitigate a serious and imminent threat to public health or safety or the life or health of the data subject or another individual; (e) the data is used for historical, statistical or research purposes and the person responsible for the processing ensures that(i) the further processing is carried out solely for the purpose for which the data was collected; and (ii) that the data is not published in a form likely to reveal the identity of the data subject; or 18. Retention of records of personal data. (1) Subject to subsections (2) and (3), a person who collects personal data shall not retain the personal data for a period longer than is necessary to achieve the purpose for which the data is collected and processed unless-