Consider the following about the Digital Personal Data Protection Bill, 2022:

1.  The Bill will apply to the processing of digital personal data within India where such data is collected online, or collected offline and is digitized. 

2. Personal data may be processed only for a lawful purpose for which an individual has given consent.

3. The central government may exempt government agencies from the application of provisions of the Bill in the interest of specified grounds such as security of the state, public order, and prevention of offenses.

How many of the above statements are correct?