Decisions made around how COVID-19 data are used are taken through established democratic processes

The COVID-19 (Miscellaneous Provisions) Act 2020 was passed in the Mauritian Assembly to, among other objectives, ensure that the provisions of the Data Protection Act did not impede the collection, verification and processing of personal data for the issuance of a licence, permit or authorisation, the Act creates. In this regard, the Act created an additional exception to the compliance with the provisions of the Data Protection Act on the basis that such exception “constitutes a necessary and proportionate measure in a democratic society.”

The public is consulted on how sensitive data (e.g. location data derived from mobile phones) are shared and used to tackle COVID-19, and their responses are used to inform policy interventions

After an extensive desktop search of online information, no information could be found to demonstrate that the public had been consulted on how sensitive data is used or shared to tackle Covid-19.

Any public-private data partnerships that are established to share and use COVID-19 related data should also include representatives from civil society and digital rights groups

After an extensive desktop search of online information, no information could be found which suggested that any public-private partnerships included representatives from civil society and digital rights groups.

The needs of vulnerable groups are taken into account and steps to protect ‘sensitive group data’ are included alongside actions to protect individuals’ data

After an extensive desktop search of online information, no information could be found to demonstrate that data regulation strategies considered the needs of vulnerable groups or that steps were taken to protect sensitive group data