Mauritius — Where to get help in your country

Access or protect personal data (1)

• Data Protection Office — Personal data complaintsLocal body or procedure

  Mauritius: complain to the Data Protection Commissioner about suspected unlawful processing of your personal data or an unresolved data-rights request under the Data Protection Act 2017. Identify the privacy problem and the remedy sought, such as access, correction, erasure or restriction.

  Section 3 covers processing connected with a controller/processor established in Mauritius, or a foreign controller/processor using equipment in Mauritius beyond mere transit. Establishment includes ordinary residence or processing through a local office, branch or agency. Your citizenship or residence alone does not establish jurisdiction; explain the provider’s Mauritius connection. Purely personal/household processing is excluded, and statutory public-sector exceptions and section 44 restrictions may apply. This route concerns personal data, not a platform ban by itself. Account restoration and compensation are not guaranteed. If you lack a Mauritian NIC or MauPass access, ask the DPO about eligibility and an accepted identification method.

  What to do

  1. For an access or other rights request, first write to the controller and keep the request, delivery evidence and response. For suspected unlawful processing, section 6 does not impose that sequence universally. Prepare the QMS 7 complaint and QMS 8 declaration: name, NIC number, occupation, address, email/phone, respondent and address, contact person, dates and facts. State the desired privacy remedy and attach relevant evidence and prior correspondence. Date and sign both. The declaration adds time/place, an accuracy statement with a criminal-law warning, and a witness line; confirm witnessing requirements with the DPO. Accepted alternative identification for non-NIC holders was not verified. A representative should provide the written authority or guardianship basis required by section 41. Limit attachments to necessary personal data.
  2. The published paper/email route says to email both forms to dpo@govmu.org and also send dated, signed copies to The Data Protection Commissioner, Data Protection Office, 5th Floor, SICOM Tower, Wall Street, Ebène, Mauritius. Questions: +230 460 0251. Named individual portal access uses MauPass. The guide directs users to Complaints → New Complaint, then Complainant, Respondent, Complaint Details, Declaration and Documents; NID, name, email and phone are mandatory for individuals. Uploads are limited to 5 MB in ZIP/PDF/DOC/DOCX/JPG/JPEG/PNG. Check the truth declaration before submitting. Ask the DPO if identification or login is unavailable. Anonymous filing is published, but suitability for an individual rights remedy was not established. Public forms, guide and login were read; authentication, submission and delivery were not tested.
  3. Keep the submitted forms, evidence, receipt and final reference number. Portal drafts are not submissions; the final reference differs from the draft reference. Track status and answer requests for documents or a hearing. Section 6 provides investigation, possible amicable resolution and a written decision if unresolved within a reasonable time; frivolous/vexatious complaints may be declined. Section 51 allows appeal within 21 days after the decision is made known. However, the ministry’s Tribunal page says its constitution is pending; current filing/hearing arrangements were not verified. Seek legal advice and contact the DPO or Ministry (+230 401 3500) promptly about preserving appeal rights.

  Use this route for a concrete personal-data issue with a Mauritius processing connection. Explain the controller, affected data, dates, previous requests and remedy. Check NIC/MauPass and witness requirements directly with the DPO; do not assume anonymous reporting is an equivalent route to your individual data rights.

  Read the source