Mauritius

The Data Protection Act of 2017 is an extremely modern privacy law that became effective on 15 January 2018 and helped align the legal framework for handling digital information in Mauritius with internationally accepted standards like the EU's General Data Protection Regulation (GDPR). Managed by the independent Data Protection Office, the legislation mandates all companies, whether local or foreign, operating in Mauritius to register themselves as either a data controller or processor for a period of three years, which is renewable after every three years. The Act provides strong rights to the data subjects such as data portability, data access, and the right to erasure. Furthermore, businesses operating in Mauritius are required to report significant data breach incidents within 72 hours of occurrence as per the legal requirements of the Act. Non-compliance with the Data Protection Act is considered a criminal offence, and strict statutory penalties ranging from fines of up to MUR 200,000 to five years of jail time are prescribed for such non-compliance with the Act.

The Financial Services Act 2007 is the legislative framework that regulates the licensing and supervision of financial services and international business activities in Mauritius. This act grants the Financial Services Commission its statutory power for the regulation and punishment of any financial sector activities that may be considered illegal or unlicensed. Learn more about the Financial Services Act 2007 at Financial Services Commission Mauritius.

Banking Act 2004 is the enabling law for the regulation and structural supervision of the banking sector in Mauritius. Enforced independently of any other body by the Bank of Mauritius, the Act establishes mandatory licensing processes, capital reserve requirements, and corporate governance responsibilities for commercial and online banks to comply with. With the establishment of an elaborate anti-money laundering framework and on-site inspection procedures within the Act itself, it ensures the protection of deposits, addresses liquidity issues, and upholds the legal soundness of the Mauritian financial system.

The Financial Intelligence and Anti-Money Laundering Act (FIAMLA) constitutes the fundamental legal framework on anti-money laundering and counter-terrorist financing in Mauritius. The FIAMLA was passed in 2002 and amended in April 2026 and has provisions for crimes involving cash payments above MUR 500,000, mandatory Suspicious Transactions Reports within five days, and suspensions of suspicious transactions within 72 hours.