The Minister may by Order exempt a data controller from complying with any provision of this Act if the Minister determines that such non-compliance is required to safeguard national security.