juris

Data Protection Act 2017

as enacted (not consolidated). juris shows this Act from a copy that is not the official consolidation, so it may not carry every amendment; the amendments juris holds are listed. It does not confirm that this is the law in force today.

Ask juris about this law Official source

Sections

  1. 1 Short title
  2. 2 Interpretation
  3. 3 Application of Act
  4. PART II: DATA PROTECTION OFFICE
  5. 4 Establishment of Office
  6. 5 Functions of Commissioner
  7. 6 Investigation of complaints
  8. 7 Power to require information
  9. 8 Preservation Order
  10. 9 Enforcement notice
  11. 10 Power to seek assistance
  12. 11 Power of entry and search
  13. 12 Obstruction of Commissioner or authorised officer
  14. 13 Delegation of power by Commissioner
  15. PART III: REGISTRATION OF CONTROLLERS AND PROCESSORS
  16. 14 Controller and Processor
  17. 15 Application for registration
  18. 16 Issue of registration certificate
  19. 17 Change in particulars
  20. 18 Renewal of registration certificate
  21. 19 Cancellation or variation of terms and conditions of registration
  22. 20 Register of controllers and processors
  23. PART IV: OBLIGATIONS ON CONTROLLERS AND PROCESSORS
  24. 21 Principles relating to processing of personal data
  25. 22 Duties of controller
  26. 23 Collection of personal data
  27. 24 Conditions for consent
  28. 25 Notification of personal data breach
  29. 26 Communication of personal data breach to data subject
  30. 27 Duty to destroy personal data
  31. 28 Lawful processing
  32. 29 Special categories of personal data
  33. 30 Personal data of child
  34. 31 Security of processing
  35. 32 Prior security check
  36. 33 Record of processing operations
  37. PART V: PROCESSING OPERATIONS LIKELY TO PRESENT RISK
  38. 34 Data protection impact assessment
  39. 35 Prior authorisation and consultation
  40. PART VI: TRANSFER OF PERSONAL DATA OUTSIDE MAURITIUS
  41. 36 Transfer of personal data outside Mauritius
  42. PART VII: RIGHTS OF DATA SUBJECTS
  43. 37 Right of access
  44. 38 Automated individual decision making
  45. 39 Rectification, erasure or restriction of processing
  46. 40 Right to object
  47. 41 Exercise of rights
  48. PART VIII: OTHER OFFENCES AND PENALTIES
  49. 42 Unlawful disclosure of personal data
  50. 43 Offence for which no specific penalty provided
  51. PART IX: MISCELLANEOUS
  52. 44 Exceptions and restrictions
  53. 45 Annual report
  54. 46 Compliance audit
  55. 47 Codes and Guidelines
  56. 48 Certification
  57. 49 Confidentiality and oath
  58. 50 Protection from liability
  59. 51 Right of appeal
  60. 52 Special jurisdiction of Tribunal
  61. 53 Prosecution and jurisdiction
  62. 54 Certificate issued by Commissioner
  63. 55 Regulations
  64. 56 Repeal
  65. 57 Transitional provisions
  66. 58 Commencement