Anonymised respondent (a company)
Enquiry is closed to the satisfaction of all parties under section 6 of the data protection act (dpa). DPO, 5 April 2023.
The facts
An anonymous email complaint alleged that a company gave the false impression that customers had to register with personal details to make reservations on its website, that neither online purchase nor reservation actually worked, and that the company therefore held customer data for no valid reason. The company replied that it collected no financial data, used SSL encryption in transit, that registration was voluntary except for purchases, and that its ticketing system was down, with collected data to be used for its stated purpose once repaired. The Data Protection Office recommended the company display a notification telling users when a service is not functional, and the company took corrective action.
Orders and outcome
With the corrective actions taken and the complainant informed, the Data Protection Commissioner closed the enquiry to the satisfaction of all parties under the DPA.
Cite this decision
Same respondent
- December 2015 · formal notice (mise en demeure)
- 18 August 2022 · enquiry has not disclosed the commission of an offence under the DPA and is closed to the satisfaction of all parties under section 6 of the Data Protection Act 2017 (DPA)
- 26 December 2024 · enquiry was closed to the satisfaction of all parties under section 42 of the Data Protection Act
- 6 April 2023 · enquiry is closed to the satisfaction of all parties under section 6 of the Data Protection Act 2017 (DPA)
- 21 June 2022 · enquiry is closed to the satisfaction of all parties under section 6 of the Data Protection Act 2017 (DPA)
- 25 February 2020 · no breach of the DPA has been established and the enquiry is thus closed
- 24 February 2020 · No breach of the DPA is thus found committed
Track Mauritius enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.