Guide

DPC Registration Guide

Under DPA 2017 s.14, controllers and processors must be registered with the Data Protection Commissioner (DPC) before they act as such.

1

Determine if you need to register

Anyone who acts as a controller or processor must be registered (s.14), unless an exception under s.44 applies. Check how the Act applies to your organisation before you start.

2

Gather required documents

The application sets out (s.15(2)): your name and address, the personal data you process and whose it is, whether you hold special categories of data, the purposes, any recipients, any countries you transfer data to, and a general description of the risks and your security measures.

3

Complete the DPC registration form

Submit your application at dataprotection.govmu.org. Ensure all fields are completed accurately to avoid delays.

4

Pay the registration fee

The fee is set by regulations made under the Act. Check the current amount and how to pay on dataprotection.govmu.org before you apply.

5

Await confirmation

Once the Commissioner grants the application, you are issued a registration certificate on payment of the fee. It is valid for 3 years (s.16).

Track it in Priva

Priva's DPC Registration Tracker records the registration you made on the Commissioner's portal and its 3-year expiry date, and flags the renewal well before the latest date to apply, 3 months before expiry (s.18).

Get Started with Priva

Frequently Asked Questions

Who must register with the DPC?

Under DPA 2017 s.14, no person may act as a controller or processor unless registered with the Data Protection Commissioner, subject to the exceptions in s.44.

How long is a registration valid?

A registration certificate is valid for 3 years (s.16(3)). You may apply to renew it no later than 3 months before it expires (s.18), and you must tell the Commissioner in writing of any change in your registered particulars within 14 days (s.17).

What happens if I don't register?

Acting as a controller or processor without registration contravenes s.14. Under s.43, a contravention with no specific penalty is an offence punishable on conviction by a fine of up to Rs 200,000 and imprisonment for up to 5 years.