The Mauritian government has launched a guide to help financial sector institutions handle personal data in compliance with the 2017 Data Protection Act. The guide was unveiled by Minister of Information Technology, Communication and Innovation Avinash Ramtohul, alongside Data Protection Commissioner Drudeisha Madhub and Bank of Mauritius Governor Priscilla Muthoora Thakoor. This initiative aims to enhance data protection, regulatory compliance, and cybersecurity in Mauritius.
Minister Ramtohul expressed concern that only 23,000 companies have registered with the Data Protection Office, despite an estimated 60,000 companies required to do so. He emphasized the need for companies to go beyond mere administrative compliance and develop robust data protection practices. The low registration rate highlights a significant gap in data protection compliance among Mauritian businesses.
To strengthen data protection, the government plans to enhance the skills of Data Protection Officers (DPOs) through specific training programs and certification exams. This move aims to ensure that DPOs possess the necessary knowledge to effectively manage personal data risks within their organizations. By upskilling DPOs, the government hopes to improve data protection practices across the country.
The government is also working to align Mauritian legislation with European standards, addressing gaps in data protection laws. This effort is part of a broader strategy to enhance the country's financial sector and maintain trust in its financial services. By converging with international standards, Mauritius aims to bolster its reputation as a secure and reliable financial hub.
Another key initiative is the development of a Citizen Data Hub, which will facilitate identity verification processes for banks, non-bank service providers, and public and private sector entities. This hub, derived from the central population database, is expected to streamline Know Your Customer procedures and improve the efficiency of identity checks.
Minister Ramtohul highlighted the economic potential of public data, which remains underutilized. He emphasized that harnessing this data can drive innovation, entrepreneurship, and economic growth, while ensuring that personal data protection rules are respected. The government aims to strike a balance between data utilization and protection.
The government plans to review the Cybersecurity and Cybercrime Act 2021 and establish a Cybersecurity Agency to strengthen prevention and response to cyber threats and financial fraud. Critical infrastructure, including banks, insurance companies, ports, and media outlets, will be subject to enhanced security requirements and mandatory audits by accredited auditors.
Key points
- Only 23,000 companies have registered with the Data Protection Office in Mauritius, out of an estimated 60,000 required to do so.
- The government plans to enhance Data Protection Officers' skills through training and certification programs.
- A new Cybersecurity Agency will be established to strengthen prevention and response to cyber threats and financial fraud.
