Anonymised respondent
Inadvertent disclosure found; consent reminder issued. DPO, 26 August 2011.
The facts
Anonymous data subjects complained that the respondent had emailed pictures of a religious nature to several recipients, exposing the complainants' work email addresses to unauthorised individuals copied on the same message. The respondent admitted sending the email, said he acted as a well-wisher without malice, and cooperated with the enquiry.
Orders and outcome
The Commissioner found the respondent had not been aware of the implications of disclosing third-party email addresses and acted without bad faith. He was reminded of the duty to obtain a data subject's express consent before using their personal data, with prosecution possible for future breaches. Dated 26.08.11 per the document.
Cite this decision
Same respondent
- 17 August 2011 · violation established
- 20 August 2015 · enquiry closed for lack of complainant collaboration
- 20 January 2016 · no offence found
- 14 December 2016 · no offence found
- 6 January 2017 · no offence found
- 6 April 2017 · no breach found after clarifications
- 14 October 2016 · enquiry closed
- 6 May 2019 · no offence found
- 12 June 2012 · referred to police for prosecution (s.20)
- 12 June 2013 · s.22 offence found proved
- 9 March 2017 · enquiry closed under section 6 (resolved to the satisfaction of all parties)
- 17 December 2018 · enquiry closed under section 6 (resolved to the satisfaction of all parties)
- 10 October 2019 · no offence found
- 17 October 2019 · no offence found
- 22 June 2020 · enquiry closed under section 6 (resolved to the satisfaction of all parties)
- 28 June 2019 · no offence found
Track Mauritius enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.