Alleged unlawful disclosure of complainant's personal information to her ex-husband, Alleged unauthorised access to complainant's account by an ex-employee
Provisions cited
section 29 of the Data Protection Act, sections 27 (1) & (2) of the Data Protection Act
Outcome
Subject to corrective measures being implemented, the enquiry is thus closed
The complainant alleged that her personal information held by a company had been disclosed to her ex-husband through the actions of an ex-employee. Investigation confirmed that the ex-employee had accessed the complainant's account on two occasions during the relevant period, but no evidence was found that personal information was unlawfully disclosed to the ex-husband in contravention of section 29. The Commissioner directed the company to strengthen its security and organisational framework under sections 27(1) and (2) and closed the enquiry subject to corrective measures being implemented.
DATA DISCLOSURE · ACCOUNT ACCESS · EMPLOYMENT · UNAUTHORISED ACCESS
Cite this decision
DPO (Mauritius), Decision No 45, determination of 22 June 2017. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/mauritius/dpo/2017/decision-45-data-disclosure-account-access/ (accessed 22 July 2026).