314 The Data Protection Bill, 2018 3. This Act does not apply to the processing of personal data by or on behalf of a public bodywhich involves national security, including activities that are aimed at assisting in the identification of the financing of terrorism and related activities, defence or public safety; or the purpose of which is the prevention, detection and identification of the proceeds of unlawful activities and the combating of money laundering activities, investigation or proof of offences, prosecution of offenders or the execution of sentences or security measures. PART Il—OBJECTS AND PRINCIPLES OF PROTECTION OF PERSONAL DATA Application. 4. The following principles shall guide the interpretation and application of this Act information shall be collected, processed, stored or dealt with in any other maimer if it is necessary for or directly related to a lawful, explicitly defined purpose and shall not intrude on the privacy of the data subject; information shall be collected directly from and with the consent of the data subject; where information relating to the data subject is held by a third party, the information may only be released to another person or put to a different use with the consent of the data subject; the data subject shall be informed of the purpose to which the information shall be put and the intended recipients of that information at the time of collection; information shall not be kept for a longer period than is necessary for achieving the purpose for which it was collected; information shall not be distributed in a manner that is incompatible with the purpose for which it was collected with the consent of the person and subject to any notification that would attract objection; reasonable steps shall be taken to ensure that the information processed is accurate, up-to date and complete; Principles of data protection.