Legal
Data Protection
Our commitment to protecting your personal data under the Data Protection Act 2017
1. Our Commitment
THE LAW FIRM is committed to protecting the privacy and security of your personal data. We comply with the Data Protection Act 2017 (DPA) of Mauritius and all applicable regulations issued by the Data Protection Commissioner.
As a law firm, we understand the importance of confidentiality and data protection. We apply the same rigour to protecting your data as we do to protecting our clients' legal interests.
2. The Data Protection Act 2017
The DPA 2017 is the primary legislation governing the protection of personal data in Mauritius. It establishes a framework for the processing of personal data and sets out the rights of data subjects and the obligations of data controllers and processors.
The Act applies to all processing of personal data by automated means or as part of a filing system, and has extraterritorial application where the data controller or processor is established in Mauritius.
3. Data Protection Principles
We adhere to the following principles under the DPA 2017:
Lawfulness, Fairness, and Transparency
Personal data shall be processed lawfully, fairly, and in a transparent manner in relation to the data subject.
Purpose Limitation
Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
Data Minimisation
Personal data shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
Accuracy
Personal data shall be accurate and, where necessary, kept up to date.
Storage Limitation
Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary.
Integrity and Confidentiality
Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction, or damage.
Accountability
The data controller shall be responsible for, and be able to demonstrate compliance with, the above principles.
4. Lawful Basis for Processing
We process personal data on the following lawful bases:
- Consent: you have given clear consent for us to process your personal data for a specific purpose
- Contract: processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract
- Legal Obligation: processing is necessary for compliance with a legal obligation (e.g., anti-money laundering regulations, court orders)
- Legitimate Interests: processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights
5. Your Rights Under the DPA
The DPA 2017 grants you the following rights:
Right of Access
You have the right to obtain confirmation as to whether or not personal data about you is being processed, and where that is the case, access to that data.
Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed.
Right to Erasure
You have the right to request the deletion of your personal data where there is no compelling reason for its continued processing.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
6. Data Protection Officer
We have appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with the DPA 2017 and managing data protection matters.
Data Protection Officer
THE LAW FIRM
Email: dpo@thelawfirm.mu
Telephone: +230 5834 1582
7. Lodging a Complaint
If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with the Data Protection Commissioner of Mauritius:
Data Protection Commissioner
Office of the Data Protection Commissioner
Email: info@dataprotection.mu
Website: www.dataprotection.mu
8. Contact
For any data protection enquiries or to exercise your rights under the DPA 2017, please contact our Data Protection Officer at the details provided above.