The act says that within five years of the law’s commencement, the government can notify that “any provision” of the act will not apply to a specific data fiduciary or class of data fiduciaries. The government can further specify how long this exemption will be applicable through notificati...