Anonymised respondents (2, incl. ICT company)
Referred to police for prosecution (s.20). DPO, 24 October 2016.
The facts
A customer of an ICT company complained that an organisation sent her a pamphlet by post using her full name and address although she had never dealt with it or consented to any disclosure. The enquiry found her name absent from the ICT company's public directory, yet the name and address on the pamphlet exactly matched her bill from that company, leading to the inference that her personal data passed from the first respondent to the second without her authorisation, with a high probability that the address sticker was printed from the first respondent's system.
Orders and outcome
The matter was referred to the police for prosecution over the unlawful disclosure.
Cite this decision
Track Mauritius enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.