36. General
37. Regulator may exempt processing of personal information
38. Exemption in respect of certain functions