Apply In Person

1. To renew a certificate of registration as a controller registered with the Data Protection Office, the applicant should make the application to the Data Protection Office (DCO) or send the application to the Data Protection Office at this address: The Data Protection Office 5th Floor Sicom Tower, Wall Street, Ebene. Please view the Data Protection Office contact details through this Contact Details.
2. The applicant can obtain the application form in-person at the Data Protection Officer, or download the application form through the Data Protection Office website via this Application form Registration/renewal of registration as Controller. Note that the form can be downloaded both in PDF version or Word version as provided in the “Documents to Use” section below. Note that if the applicant opts to download the Word version of the application form, it is advised to fill the form first then print it out i.e, prefilled.
3. Read and complete the application form legibly as required in the note section of the application form.
4. Once completed, obtain all the required supporting documents as mentioned in the “Required Documents” section below and attach the documents to the filled-in form. Note that incomplete applications will not be accepted.
5. Then visit the Data Protection Office and submit the complete application dossier to the officer at the service desk or the applicant can send the application to The Data Protection Office at this address: 5th Floor Sicom Tower, Wall Street, Ebene through using a registered mail.
6. The officer will receive and evaluate the application to determine if the form is completed as required and if all the required documents are provided by the applicant.
7. Upon the evaluation process and the application is in order, the officer will issue an acknowledgment receipt of the application to the applicant with details of the application.
8. The application will then be forwarded to the Commissioner’s office for processing.
9. The Commissioner will assess the application and if it meets the required merits for the renewal of registration, then the application will be approved.
10. After the approval, the applicant is then required to pay the prescribed renewal fees as mentioned in the “Fees” section below within fourteen days of submitting the application. Note the fee is paid at the cash office of the Data Protection Office. Applicants can make the payment by cash or by cheque drawn to the order of the Government of Mauritius. Note that It is also advisable to write the Application ID number and name of the controller on the back of the cheque.
11. Upon making the payment, the registration certificate will be processed and issued to the applicant.

Apply Online

1. To make the application to renew a certificate of registration as a controller registered with the Data Protection Office, the applicant should visit the Data Protection Office website link Data Protection Office website] to complete the online application form.
2. On the website index page, scroll down the page to find the “Registration / Renewal” section and then click on the “Online Submission of forms” to be directed to the next page.
3. Read the provided information and then click on the “click here” hyperlink next to this statement “To access portal for online submission of controller application, click here”.
4. Upon clicking on the “click here” hyperlink, the applicant will be directed to the online application form for registration/renewal of registration as a controller.
5. Read and complete the online application form as required and then attach all necessary documents as instructed in the “Declaration” section of the online application form.
6. Upon completing the online application form, click on the “Submit” button to send the application to the Data Protection Office.
7. Then an officer at the Data Protection Office will receive and evaluate the application to determine if the form is completed as required and if all the required documents are provided by the applicant.
8. Upon the evaluation process and the application is in order, the officer will issue an acknowledgment receipt of the application to the applicant with details of the application.
9. The application will then be forwarded to the Commissioner’s office for processing.
10. The Commissioner will assess the application and if meets the required merits for the renewal of registration, then the application will be approved.
11. The applicant is then required to pay the prescribed renewal fees as mentioned in the “Fees” section below within fourteen days of submitting the application. Note the fee is paid at the cash office of the Data Protection Office. Applicants can make the payment by cash or by cheque drawn to the order of the Government of Mauritius. Note that It is also advisable to write the Application ID number and name of the controller on the back of the cheque.
12. Upon making the payment, the registration certificate will be processed and issued to the applicant.

• A copy of the Certificate of Incorporation and/or the Business Registration Number (BRN) card or any other document confirming the existence of the said organization.​​
• Valid identification document {National Identity card {NIC}/Passport)
• Any other related documents supporting the change of name, amalgamation, or cessation of business issued by the Corporate and Business Registration Department (i.e. Companies Division).

Data Protection Office
Adress: Level 5, SICOM Tower,
Wall Street, Ebene Cyber City,
Ebene, Republic of Mauritius.
Tel: 4600251
Fax: 4897341
Email Address: dpo@govmu.org
Contact Details

• A holder of Registration Certificate as a controller who wishes to renew their certificate.

The registration fees payable are related to the number of employees as follows:

• For applicants between 0 to 5 employees - Rs 1000.
• For applicants between 6 to 25 employees - Rs 1500.
• For applicants between more than 25 employees -Rs 2500.

• The validity of the registration certificate will be 3 years and renewable thereafter.

• Application form Registration/renewal of registration as Controller (PDF Version)
• Application form Registration/renewal of registration as Controller (Word Version)

Please attach sample completed documents that would help other people.

Please explain the processing time taken in obtaining the document/certificate.

Videos explaining the procedure or to fill the applications.
Attach videos using the following tag <&video type='website'>video ID|width|height<&/video&> from external websites.
Please remove the '&' inside the tags during implementation.
Website = allocine, blip, dailymotion, facebook, gametrailers, googlevideo, html5, metacafe, myspace, revver,
sevenload, viddler, vimeo, youku, youtube
width = 560, height = 340, Video ID = Can be obtained from the URL of webpage where the video is displayed.
e.g In the following url 'http://www.youtube.com/watch?v=Y0US7oR_t3M' Video ID is 'Y0US7oR_t3M'.

• Holders of a registration certificate for controllers are advised to apply for the renewal of the certificate not later than 3 months before the date of its expiry.
• Where there is a change in any of the particulars in the applicant’s application, the applicant must, within 14 days of the date of the change, notify the Commissioner in writing of the nature and date of the change. A controller or processor who fails to notify the Commissioner will commit an offense and will, on conviction, be liable to a fine not exceeding 50,000 rupees.
• Failure to register or renew registration the registration certificate may amount to an offense under the DPA and consequently, a fine not exceeding 200,000 rupees and imprisonment for a term not exceeding 5 years on conviction may be imposed.

• Controller details.
• Full name.
• Address (Block/house number/street /village/town).
• Contact details (Telephone number /Fax /Email address).
• Representative and date protection officer details.
• Full name.
• Address (Block/house number/street /village/town.
• Contact details (Telephone number /Fax /Email address).
• Description of personal details.
• Name, address, National Identity Card Number, etc.
• Categories of the data subject.
• Employee, client, supplier, shareholder, etc.
• Purpose of processing
• For payroll, invoicing, know Your Customer(KYC), registration, etc.
• The Total number of employees.

• All public and private organizations, sociétés, partnerships, professionals such as doctors, lawyers, engineers, architects, notaries, and sole traders such as jewelers, bookmakers, and any other organizations processing or keeping personal data of living individuals, who are already registered with the Data Protection Office are required to renew their registration certificate for the controller before the current certificate expires.

• ​​​Data Protection Act 2017​​
• Application Guideline

Please explain what are other uses for obtaining this document/certificate.
e.g. Birth Certificate can be used as proof of identity.

• Data Protection Office

More information which might help people.