Section 17 exempts some situations from parts of the Act, for example: processing for enforcing legal rights or claims, by courts and regulators, for prevention and investigation of offences, processing in India of data of people outside India under a contract with a foreign person (the outsourcing exemption), mergers and demergers, recovery of loans by financial institutions, research, archiving or statistical purposes (with safeguards), and certain classes of Data Fiduciaries such as startups. The Central Government may also exempt State instrumentalities for security, sovereignty and public order.