unlawful or arbitrary discrimination; “transborder flow” refers to any international, cross border flows of personal information by means of electronic transmission; “whistleblowing” refers to Lesotho legal procedure allowing individuals to report the behaviour of a member of their employer which, they consider contrary to a law or regulation or fundamental rules established by such employer; Application of the Act 3 (1) This Act applies to a data controller – (a) domiciled or having its principal place of business in Lesotho; or (b) not domiciled or does not have its principal place of business in Lesotho and – (i) uses automated or non-automated means in Lesotho; or (ii) the automated or non-automated means are only used for forwarding personal information. (2) This Act is applicable to any processing of personal information performed wholly or partly by automated means. Exemptions 4 This Act does not apply to the processing of personal information – (a) in the course of a purely personal or household activity’ (b) which has been de-identified to the extent that it cannot be re-identified; or