Mauritius reporting persons must be able to act on a United Nations or domestic sanctions listing within 24 hours: verify the customer base, freeze, notify the National Sanctions Secretariat, report to the supervisor and the…
Customer due diligence is the core preventive obligation of every Mauritius reporting person, and the risk-based approach decides how much of it each customer needs. This course works through the Financial Intelligence and Anti-Money Laundering…
The Data Protection Act 2017 is the law that every business in Mauritius handling personal data must follow, from registering with the Data Protection Office to notifying a breach within 72 hours. This course takes…
From 1 January 2027, every controller in Mauritius must designate a data protection officer from among its staff, notify the Data Protection Office of the appointment within 14 days, and publish the officer’s contact details.…
Who must appoint a Data Protection Officer, who can be one, and what protections and duties come with the role? This course covers Articles 37, 38 and 39 of the General Data Protection Regulation (EU)…
When must you carry out a data protection impact assessment, what must it contain, and when must you go to the Commissioner before you start? This course works through Articles 35 and 36 of the…
The record of processing activities is the document the Commissioner asks for first, and in Cyprus failing to keep it, update it or produce it is a criminal offence. This course takes you through Article…
What to do in the first 72 hours after a personal data breach, and how to prove you did it right. This course covers Articles 4(12), 32, 33 and 34 of the General Data Protection…