Tracker / Mauritius / 2019 / Anonymised respondent (the organisation
§ Tracker · Mauritius · DPO · 2019
Anonymised respondent (the organisation processing visa applications in Mauritius)
This enquiry has been conducted successfully to the satisfaction of all parties concerned relating to the applicability of the data protection act within the mauritian context. the enquiry is thus closed. DPO, 4 November 2019.
incorrectly sending confidential personal and financial information of visa applicants to unknown third parties without consent
Provisions cited
Data Protection Act (as applied by the DPO)
Outcome
this enquiry has been conducted successfully to the satisfaction of all parties concerned relating to the applicability of the Data Protection Act within the Mauritian context. The enquiry is thus closed
The complainant alleged that the organisation processing visa applications in Mauritius had incorrectly sent a significant amount of confidential personal and financial information, arising from a spouse's visa application, to third parties without consent, including to another applicant who received the complainant's and her husband's documents along with her own. After the office took the matter up with the respondent, the parties began receiving communications and entered discussions on compensation for the error.
Orders and outcome
The Data Protection Commissioner held that the enquiry had been conducted successfully to the satisfaction of all parties concerned and closed it.
DATA BREACH · VISA APPLICATIONS · THIRD PARTY DISCLOSURE
Cite this decision
DPO (Mauritius), Anonymised respondent (the organisation processing visa applications in Mauritius), Decision No 63, determination of 4 November 2019. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/mauritius/dpo/2019/decision-63-data-breach-visa-applications/ (accessed 30 August 2026).