Anonymised respondent (the organisation processing visa applications in Mauritius)

This enquiry has been conducted successfully to the satisfaction of all parties concerned relating to the applicability of the data protection act within the mauritian context. the enquiry is thus closed. DPO, 4 November 2019.

Record ID

mu-dpo-2019-0063

Case reference

Decision No 63

Jurisdiction

Mauritius

Regulator

DPO

Type

determination

Date decided

4 November 2019

Respondent type

private

Sector

professional services

Violations

incorrectly sending confidential personal and financial information of visa applicants to unknown third parties without consent

Provisions cited

Data Protection Act (as applied by the DPO)

Outcome

this enquiry has been conducted successfully to the satisfaction of all parties concerned relating to the applicability of the Data Protection Act within the Mauritian context. The enquiry is thus closed

Status

final

Source

Official document ↗

Record verified

17 July 2026

Summary

The complainant alleged that the respondent, a visa application processing organisation, had incorrectly sent a significant amount of confidential personal and financial information to unknown third parties without consent, with the complainant's and spouse's documents sent to another individual. The respondent acknowledged the incident as an isolated human error, confirmed that VIS (the data controller) had been notified and reported it to its central team, and stated that processes had been digitised to prevent recurrence. The complainant was in discussions with VIS about compensation and did not provide further allegations, and the enquiry was closed.

DATA BREACH · VISA APPLICATIONS · THIRD PARTY DISCLOSURE

Cite this decision

Track Mauritius enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.