Anonymised respondent (a company)
Enquiry is closed to the satisfaction of all parties under section 6 of the data protection act (dpa). DPO, 5 April 2023.
Summary
An anonymous complainant alleged that a company was collecting customers' personal data for website registration and reservations while its online purchase and reservation systems were non-functional, and that the data was held without a valid reason. The Data Protection Office sought clarifications from the company, which responded that data collection was voluntary, no financial data was stored, and the server used SSL encryption. The DPO recommended that the company display an appropriate notification when services are non-functional, and after corrective actions were taken the enquiry was closed.
Cite this decision
Same respondent
- December 2015 · formal notice (mise en demeure)
- 18 August 2022 · enquiry has not disclosed the commission of an offence under the DPA and is closed to the satisfaction of all parties under section 6 of the Data Protection Act 2017 (DPA)
- 26 December 2024 · enquiry was closed to the satisfaction of all parties under section 42 of the Data Protection Act
- 6 April 2023 · enquiry is closed to the satisfaction of all parties under section 6 of the Data Protection Act 2017 (DPA)
- 21 June 2022 · enquiry is closed to the satisfaction of all parties under section 6 of the Data Protection Act 2017 (DPA)
- 25 February 2020 · no breach of the DPA has been established and the enquiry is thus closed
- 24 February 2020 · No breach of the DPA is thus found committed
Track Mauritius enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.