Anonymised respondents (2)

Disclosure held to be processing; referred to police (s.20). DPO, 12 May 2014.

Record ID

mu-dpo-2014-0018

Case reference

DPO/COMP/18

Jurisdiction

Mauritius

Regulator

DPO

Type

determination

Date decided

12 May 2014

Respondent type

public

Sector

government

Violations

unlawful disclosure of sensitive personal data

Provisions cited

s.2 DPA 2004, s.25(1) DPA 2004, s.26(1)(b) DPA 2004, s.27(1)-(2) DPA 2004, s.29(1) DPA 2004, s.61 DPA 2004, s.20 DPA 2004

Outcome

disclosure held to be processing; referred to police (s.20)

Status

final

Source

Official document ↗

Source integrity

SHA-256 747a7099e2de0ad8…

Record verified

30 July 2026

The facts

Two officers of an organisation complained that personal data of the first complainant, including her national identity card number, address and salary details, were published in an internal audit report, with extracts reproduced in the written press and in a pamphlet attributed to the employees' union. The Commissioner held the audit report was meant for the board's confidential consideration, that the complainants were unfairly tried in the press, and that the organisation failed to show an internal system of control to prevent leaks.

Orders and outcome

Prosecution was advised against the chairman for breaches of the security-measures duties and against the board member who caused the leak for disclosure-related breaches, and the matter was referred to the police. The press was reminded that the journalism exemption demands a genuine public-interest belief. Dated 12.05.14 per the document.

SENSITIVE-DATA · DISCLOSURE · PUBLIC-BODY · POLICE-REFERRAL

Cite this decision

Same respondent

• 24 June 2011 · no prejudice found (genuine error)
• 14 May 2012 · no offence found
• 22 April 2016 · no evidence of unlawful disclosure

Track Mauritius enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.