Anonymised respondents (2)

Disclosure held to be processing; referred to police (s.20). DPO, 12 May 2014.

Record ID

mu-dpo-2014-0018

Case reference

DPO/COMP/18

Jurisdiction

Mauritius

Regulator

DPO

Type

determination

Date decided

12 May 2014

Respondent type

public

Sector

government

Violations

unlawful disclosure of sensitive personal data

Provisions cited

s.2 DPA 2004, s.25(1) DPA 2004, s.26(1)(b) DPA 2004, s.27(1)-(2) DPA 2004, s.29(1) DPA 2004, s.61 DPA 2004, s.20 DPA 2004

Outcome

disclosure held to be processing; referred to police (s.20)

Status

final

Source

Official document ↗

Record verified

11 July 2026

Summary

Complainants' national identity card numbers, addresses and salary details were disclosed without authorisation. The Commissioner held that disclosure of structured sensitive personal information by a data controller is 'processing' within section 2 regardless of medium, found breaches across sections 25-29 and 61, and referred the matter to the Police under section 20.

SENSITIVE-DATA · DISCLOSURE · PUBLIC-BODY · POLICE-REFERRAL

Cite this decision

Same respondent

• 24 June 2011 · no prejudice found (genuine error)
• 14 May 2012 · no offence found
• 22 April 2016 · no evidence of unlawful disclosure

Track Mauritius enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.