On July 20, 2023, the Data Protection Office (the Office) published its annual report for the year 2022. The report highlights the provision of online services through the e-DPO system and efforts of the Office towards the EU adequacy decision for Mauritius, which is awaiting further feedback from the European Commission.  

In particular, the report covers enforcement activities carried out by the Office and contains a diagram to illustrate the number of cases by month during the reporting period. In total, the Office received 71 complaints regarding the unauthorized use of CCTV cameras, unlawful processing of personal data, and right of access, among others. Of these, the Office closed 36 complaints, while five other cases were resolved through amicable resolution. In addition, in the reporting period, the Office received 57 personal data breach notifications. In this regard, the report outlines that employees disclosing information to unintended recipients and business email compromise were the main causes of breaches reported. 

Other areas of the Office's activities covered in the report include: 

• international cooperation; 
• participation in surveys; 
• court cases involving the Office; 
• registration of controllers and processors; 
• requests for legal advice; 
• advisory/stakeholder role in projects;  
• Data Protection Impact Assessments (DPIAs); 
• transfers of personal data abroad; and 
• review of compliance audit forms and certification forms. 

You can read the report here.