Anonymised respondents (2, incl. ex-employee)

Breach of s.24(1) found; referred to police (s.20). DPO, 28 April 2015.

Record ID: mu-dpo-2015-0020
Jurisdiction: Mauritius
Regulator: DPO
Type: determination
Date decided: 28 April 2015
Respondent type: individual
Sector: general
Violations: unlawful data disclosure, processing without consent
Provisions cited: s.2 DPA 2004, s.11 DPA 2004, s.20 DPA 2004, s.24(1) DPA 2004
Outcome: breach of s.24(1) found; referred to police (s.20)
Status: final
Source: Official document ↗
Record verified: 11 July 2026

Summary

An ex-employee and her spouse posted client information without the clients' valid consent. Citing the Article 29 Working Party's Opinion 8/2001 on employment data, the Commissioner found the disclosure unlawful absent a section 24 exception, held a breach of section 24(1), and referred the respondents to the Police under section 20.

EMPLOYMENT · DISCLOSURE · POLICE-REFERRAL · WP29

Cite this decision

DPO (Mauritius), Anonymised respondents (2, incl. ex-employee), determination of 28 April 2015. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/mauritius/dpo/2015/decision-20-ex-employee-client-postings/ (accessed 22 July 2026).

Track Mauritius enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.