Alleged unlawful disclosure of complainant's personal information to her ex-husband, Alleged unauthorised access to complainant's account by an ex-employee
Provisions cited
section 29 of the Data Protection Act, sections 27 (1) & (2) of the Data Protection Act
Outcome
Subject to corrective measures being implemented, the enquiry is thus closed
The complainant alleged that a company disclosed her personal information to her ex-husband. The enquiry revealed that an ex-employee of the company had accessed the complainant's account on two dates in the relevant period, but no evidence showed her personal information was unlawfully disclosed to the ex-husband.
Orders and outcome
The company was directed to strengthen its security and organisational framework so that no employee has unauthorised access to clients' personal information, particularly the procedures customer-facing agents use to access client accounts. Subject to those corrective measures being implemented, the enquiry was closed.
DATA DISCLOSURE · ACCOUNT ACCESS · EMPLOYMENT · UNAUTHORISED ACCESS
Cite this decision
DPO (Mauritius), Anonymised respondents (a company, the complainant's ex-husband, and an ex-employee of the company), Decision No 45, determination of 22 June 2017. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/mauritius/dpo/2017/decision-45-data-disclosure-account-access/ (accessed 30 August 2026).