Section 24: Processing of personal data
repealed (no longer in force). juris shows the text as it was consolidated; it does not confirm that this is the law in force today. The records juris holds show this law as repealed.
24. Processing of personal data
(1) No personal data shall be processed unless the data controller has
obtained the express consent of the data subject.
(2) Notwithstanding subsection (1), personal data may be processed
without obtaining the express consent of the data subject where the
processing is necessary—
(a) for the performance of a contract to which the data subject is a
party;
(b) for the purpose of taking steps required by the data subject
before entering into a contract;
(c) for the purpose of protecting the vital interests of the data
subject;
(d) for compliance with any legal obligation to which the data
controller is subject;
(da) for the purpose of making use of a unique identification number
to facilitate sharing information and avoid multiple registrations
among public sector agencies;
(e) for the administration of justice; or
(f) in the public interest.
[S. 24 amended by s. 14 of Act 9 of 2015 w.e.f. 14 May 2015.]
(S. 24 came into operation on 16 February 2009.)
continued on page D3 – 15
[Issue 7] D3 – 14
Revised Laws of Mauritius