Apply Online

1. Applicant can make an online Registration of Data Processor in Mauritius through the Data Protection Office (DPO) Link
2. To access portal for online submission of Processor application, the applicant can click here link
3. The applicant is required to fill in the online application form with the necessary information and documents and they can be found under the “Required Documents” section of this stage.
4. Once the form is completed, click on the “Submit” button.
5. Once the application is submitted, a confirmation email will be sent to the applicant with a reference number.
6. The applicant can track the progress of the application by entering the reference number on the Data Protection Office website.
7. The applicant is required to send they payment by cheque drawn to the order of Government of Mauritius or by cash in person at the Data Protection Office within 14 days after submission of the applicant online form to complete their registration.
8. If the applicant pays online, they must select the payment method he/she would like to use (e.g., credit card, bank transfer, etc.) and follow the instructions to complete the payment.
9. After the applicant has made their payment, he/he will receive an email confirmation with a payment reference number.
10. The applicant can use this reference number to track the status of the payment.
11. The Data Protection Office will review the application and may contact the applicant for any additional information or documents required.
12. The applicant will receive a copy of the Data Protection Certificate issued by the DPO upon successful registration.
13. Generally, the processing time for the application is about two weeks.

Note: From 01 August 2020, the Data Protection Office will NOT accept any combined cheques for payment of Registration/Renewal in respect of Controllers/Processors. All applications must be accompanied by their individual cheques.

• A copy of the identity document (ID) of the Data Processor.
• A copy of the signed Data Protection Policy of the Data Processor.
• A copy of the Data Protection Officer (DPO) appointment letter.
• A copy of the Data Protection Impact Assessment (DPIA) report.
• A copy of the security audit report.
• A copy of the signed Data Processing Agreement (DPA).
• A copy of the registration form.
• A proof of payment of the registration fee.

Data Protection Office (DPO) 
Address 5th Floor Sicom Tower,
Wall Street,Ebene Mauritius 
Telephone: (+230) 460 02 51 
Email:dpo@govmu.org 
Website link
Contact link
Location link

• Any person or organization that processes personal data in Mauritius is eligible for online registration of Data Processor with the Mauritius Data Protection Office (DPO).
• Businesses or organizations that process or handle the personal data of individuals may need to register, depending on their size, type of data processed, and the purpose of data processing.
• Individuals who are self-employed, or who act as data controllers, may also need to register with the DPO.

Please refer to the fees details from this Link

The Data Protection Certificate will be valid for three years and the applicant will be required to renew the certificate every three year.

Please attach documents that can be used by people. e.g. links

Please attach sample completed documents that would help other people.

Generally, the processing time for the application is about two weeks.

Videos explaining the procedure or to fill the applications.
Attach videos using the following tag <&video type='website'>video ID|width|height<&/video&> from external websites.
Please remove the '&' inside the tags during implementation.
Website = allocine, blip, dailymotion, facebook, gametrailers, googlevideo, html5, metacafe, myspace, revver,
sevenload, viddler, vimeo, youku, youtube
width = 560, height = 340, Video ID = Can be obtained from the URL of webpage where the video is displayed.
e.g In the following url 'http://www.youtube.com/watch?v=Y0US7oR_t3M' Video ID is 'Y0US7oR_t3M'.

Please provide other instructions related to the certificate/documents.
e.g. The state office holds birth records since january 1908.

• Business name and registration number
• Contact information (i.e. address, phone number, email)
• Details of the Data Protection Officer (if applicable)
• Type of data to be processed and purposes of data processing
• Description of the data processing activities
• Description of the security measures employed to protect the data
• Details of any third-party providers or data processors involved in the processing of data

• The Act requires all data controllers and processors to register with the Data Protection Commissioner.
• Registration helps to ensure that data controllers and processors are aware of their responsibilities under the Act and are taking steps to protect the privacy and security of personal data.
• By registering, data processors demonstrate that they understand their obligations and can be trusted to treat personal data responsibly.

• Registration of Data processor in Mauritius is done through the Mauritius Data Protection Office (DPO).
• The registration process can be done online on the DPO website. It requires the submission of a Data Controller Registration Form, which can be downloaded from the website.
• It requires details such as the name and address of the Data processor, the type of data being processed, the purpose of processing, the duration of processing and the persons responsible for data processing.
• It also requires a statement of compliance with the Data Protection Act and evidence of financial security. Once the form is completed and submitted, the Data processor will be given a registration number and a certificate of registration.
• The registration is valid for a period of three years, after which it must be renewed.

Please explain what are other uses of obtaining this document/certificate.
e.g. Birth Certificate can be used as proof of identity.

Link

More information which might help people.