Anonymised respondent (public body)

Determination with findings; complaint procedure clarified. DPO, 12 July 2012.

Record ID: mu-dpo-2012-0009
Case reference: DPO/DEC/9
Jurisdiction: Mauritius
Regulator: DPO
Type: determination
Date decided: 12 July 2012
Respondent type: public
Sector: government
Violations: inadequate password confidentiality (alleged)
Provisions cited: s.6(3) DPA 2004, s.11 DPA 2004, s.27 DPA 2004
Outcome: determination with findings; complaint procedure clarified
Status: final
Source: Official document ↗
Record verified: 11 July 2026

Summary

An employee alleged her default system password was known to colleagues and could not be changed. The Commissioner held, notably, that no provision of the Act requires an employee to inform or seek management's permission before lodging a complaint with the Office, and addressed the data controller's security obligations under section 27.

EMPLOYMENT · SECURITY-MEASURES · PUBLIC-BODY

Cite this decision

DPO (Mauritius), DPO/DEC/9, determination of 12 July 2012. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/mauritius/dpo/2012/decision-9-workplace-password-complaint/ (accessed 22 July 2026).

Track Mauritius enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.