Mauritius DPA

Data Protection Act 2017

GDPR-aligned data protection law requiring Data Protection Officer appointment and breach notification to Commissioner.

Jurisdiction

Mauritius

Enacted

Nov 15, 2017

Effective

Jan 15, 2018

Enforcement

Data Protection Commissioner

GDPR-aligned framework

Mauritius Data Protection Office

Why It Matters

Mauritius's GDPR-aligned framework creates familiar compliance pathway for European AI companies expanding to African markets.

At a Glance

Applies to

AI CompanionMental Health AppGeneral Chatbot

Requires

Transparency User Rights Data Minimization

Who Must Comply

Data controllers and processors in Mauritius
Entities processing data of Mauritian residents
Public bodies processing personal data

Obligations fall on:

Safety Provisions

Mandatory Data Protection Officer for certain controllers
Breach notification to Data Protection Commissioner
Data Protection Impact Assessment for high-risk processing
Right to object to automated processing
Cross-border transfer restrictions

Compliance & Enforcement

Penalties

MUR 2M; criminal (up to 10yr)

Criminal liability

Primary Source

Mauritius Data Protection Office

https://dataprotection.govmu.org/

View on map

Mauritius

Focus Areas

Mental health & crisis

Algorithmic accountability

Cite This

APA

Mauritius. (2017). Data Protection Act 2017.

Related Regulations

In Effect ZM

Zambia DPA

Zambia's comprehensive data protection law with special protections for vulnerable persons and DPIA requirements for high-risk processing.

In Effect BW

Botswana DPA

Botswana's modernized data protection law requiring Data Protection Impact Assessment and establishing age 16 for consent.

In Effect SC

Seychelles DPA

Seychelles' modern data protection law requiring DPO for large-scale processing and recognizing Cross-Border Privacy Rules certification.

In Effect RW

First African country to adopt comprehensive national AI policy. Establishes Responsible AI Office (RAIO) under MINICT. Implements RURA ethical guidelines covering beneficence, non-maleficence, autonomy, justice, explicability, transparency. Non-binding framework.

Proposed KE

Kenya AI Bill

First comprehensive AI bill in Sub-Saharan Africa. Proposes creation of AI Commissioner, AI Authority, and Advisory Committee. Establishes risk-based regulatory model aligned with EU AI Act framework, criminalizes harmful deepfakes, and mandates AI content labeling.

In Effect US

White House AI Legislative Framework

Non-binding White House framework outlining seven legislative pillars for Congress, including child safety protections, federal preemption of state AI laws, liability limitations for AI developers, intellectual property protections, free speech safeguards, AI infrastructure investment, and workforce development. Calls for a unified national standard superseding state AI regulations while preserving state child safety, consumer protection, and anti-fraud laws.

All regulations Check if this applies to you

Last updated January 22, 2026. Verify against primary sources before relying on this information.