Anonymised respondent (public body)
Determination with findings; complaint procedure clarified. DPO, 12 July 2012.
The facts
An employee complained that she was suspended for allegedly sending an anonymous complaint letter to the Data Protection Commissioner which she denied writing, and later took early retirement under an agreement that ended the disciplinary action. The Commissioner clarified that nothing in the Act requires an employee to seek management's permission before complaining to the office, that published decisions are anonymised, and that only parties to a case are notified of its outcome.
Orders and outcome
The determination records that the complainant could not be held liable for the unauthorised use of a password also known to the IT department, and urges the employer to adopt organisational and technical safeguards against unauthorised access to workstations, with prosecution possible for failure to meet the Act's security duties. Dated 12 July 2012.
Cite this decision
Track Mauritius enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.