11 Data Protection Act, 2018 - 5. ............................................... diagnosis, medical research, rehabilitation and the provision of care and treatment and the management of healthcare services; “healthcare professional” means a medical practitioner, dental practitioner, pharmacist, clinical psychologist, nurse, midwife, medical assistant, physiotherapist, occupational therapist and other allied healthcare professionals and any other person involved in the giving of medical, health, dental, pharmaceutical and any other healthcare services under the jurisdiction of the Ministry of Health. PART IV EXEMPTION 21. Exemption. (1) Personal data processed by an individual only for the purposes of that individual’s personal, family or household affairs, including recreational purposes shall be exempted from the provisions of this Act. (2) Subject to section 22, personal data– (a) processed for– (i) the prevention or detection of crime or for the purpose of investigations; (ii) the apprehension or prosecution of offenders; or (iii) the assessment or collection of any tax or duty or any other imposition of a similar nature, shall be exempted from the General Principle, Notice and Choice Principle, Disclosure Principle and Access Principle and other related provisions of this Act; (b) processed in relation to information of the physical or mental health of a data subject shall be exempted from the Access Principle and other related provisions of this Act of which the application of the provisions to the data subject would be likely to cause serious harm to the physical or mental health of the data subject or any other individual; (c) processed for preparing statistics or carrying out research shall be exempted from the General Principle, Notice and Choice Principle, Disclosure Principle and Access Principle and other related provisions of this Act, provided that such personal data is not processed for any other purpose and that the resulting statistics or the results of the research are not made available in a form which identifies the data subject; (d) that is necessary for the purpose of or in connection with any order or judgment of a court shall be exempted from the General Principle, Notice and Choice Principle, Disclosure Principle and Access Principle and other related provisions of this Act; (e) processed for the purpose of discharging regulatory functions shall be exempted from the General Principle, Notice and Choice Principle, Disclosure Principle