255 method to identify the data subject; or (c) can be linked by a leasonably foreseeable method to other infolmation that identilies the data subject. Application of the Act 3. This Act applies lo a dala controller' - (a) domiciled or having its principal place of business in Lesotho; or (b) not domiciled or does not have its principal place of business in Lesotho and - (i) uses automated or non-automated means in Lesotho; or (ii) the automated or non-automated means ale only used for forwalding personal infonnation. Exemptions 4. This Act does not apply to the processing of personal inforrnation- (a) in the course of (b) which has been de-identified to the extent that it cannot be reidentified; or (c) by ol on behalf of the State and involves national security and defence or public safety; (d) solely for journalistic purposes or the purpose of artistic or literary expression only if they ale necessary to reconcile the right to privacy with the rules governing fi'eedom of expression; or' (e) which has been exempted under this Act. a purely personal or household activity;