🇲🇺
Mauritius
Data Protection Act 2017
Africa🟢 Comprehensive
Compliance Score
50%
7 Addressed
6 Partial
1 None
Authority
Data Protection Office (DPO)
Overview
Mauritius's Data Protection Act 2017 establishes data-subject rights, controller obligations, and oversight by the Data Protection Office. Cross-border transfers and registration requirements should be assessed under the current Act and regulations.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
PartialChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Partial? Frequently Asked Questions
What is the primary data protection law in Mauritius?+
Mauritius is governed by the Data Protection Act 2017. The law is enforced by the Data Protection Office (DPO). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Mauritius require a Data Protection Officer (DPO)?+
Partially. The Data Protection Act 2017 may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Mauritius?+
Partially. While Data Protection Act 2017 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Mauritius?+
Under the Data Protection Act 2017, organizations must notify the Data Protection Office (DPO) and affected individuals without undue delay in the event of a personal data breach.