Status
In force
Consent model
Opt-in
Primary law
Data Protection Act 2017
Year
2017
Authority
Data Protection Office
Marketing consent
GDPR-aligned consent and bases.
Transfers
Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.
Penalties
Violations can bring fines up to MUR 200,000 and imprisonment.
The framework
The operative statute in Mauritius is the Data Protection Act 2017, enforced by the Data Protection Office.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Data Protection Act 2017
2017 · In force
Mauritius aligned tightly with the GDPR in 2017 and ratified Convention 108+, positioning itself as the Indian Ocean's compliance-friendly hub; it has long pursued EU adequacy.
Marketing and advertising
GDPR-aligned consent and bases. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.
Enforcement and penalties
Violations can bring fines up to MUR 200,000 and imprisonment.
Cite this page: "Mauritius Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/mauritius.html. Accessed [date].