MTN Eswatini

Enforcement notice issued; warning imposed. EDPA, June 2024. month-precision date

Record ID

sz-edpa-2024-0001

Case reference

EDPA Notice No. 3/2024

Jurisdiction

Eswatini

Regulator

EDPA

Type

enforcement notice

Date decided

June 2024

Respondent type

private

Sector

telecoms

Violations

unauthorised data disclosure to third party, failure to implement security measures

Provisions cited

Section 14(1)(b) DPA 2022, Section 14(2) DPA 2022, Section 17 DPA 2022, Section 41(1) DPA 2022

Outcome

enforcement notice issued; warning imposed

Status

final

Source

Official document ↗

Record verified

11 July 2026

Summary

The EDPA issued MTN Eswatini a Section 41 enforcement notice after an outsourced call-centre agent shared a customer's six-month Mobile Money statement with a third party over WhatsApp without identity verification; the third party used the statement against the customer in a debt matter. The Authority found breaches of sections 14(1)(b) and 14(2), imposed a warning valid for one year, and directed remedial measures including a call-centre DPIA, password protection for data shared via WhatsApp, role-based access, supervisory review before external disclosure, and a progress report within three months.

TELECOMS · MOBILE-MONEY · THIRD-PARTY-DISCLOSURE · CALL-CENTRE · WARNING

Cite this decision

Track Eswatini enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.