The Data Protection Act 2017 is the law that every business in Mauritius handling personal data must follow, from registering with the Data Protection Office to notifying a breach within 72 hours. This course takes…
From 1 January 2027, every controller in Mauritius must designate a data protection officer from among its staff, notify the Data Protection Office of the appointment within 14 days, and publish the officer’s contact details.…
Who must appoint a Data Protection Officer, who can be one, and what protections and duties come with the role? This course covers Articles 37, 38 and 39 of the General Data Protection Regulation (EU)…
When must you carry out a data protection impact assessment, what must it contain, and when must you go to the Commissioner before you start? This course works through Articles 35 and 36 of the…
The record of processing activities is the document the Commissioner asks for first, and in Cyprus failing to keep it, update it or produce it is a criminal offence. This course takes you through Article…
What to do in the first 72 hours after a personal data breach, and how to prove you did it right. This course covers Articles 4(12), 32, 33 and 34 of the General Data Protection…
Data protection runs through every stage of the customer journey. This deep-dive course covers Part VII of the Financial Consumer Protection Act, 2022 (sections 29–32) — the core confidentiality duty, the six-part written policy, advance…