Does my business need to register with the Data Protection Commissioner?

Almost certainly yes, if you are a controller or processor operating in Mauritius.

Yes, in almost all cases. Under the Act, both controllers and processors must register with the Data Protection Office before processing personal data, and registration is renewed periodically.

A controller decides why and how personal data is used. A processor handles it on someone else's instructions. Many businesses are both: you are a controller for your own staff records and a processor for a client whose data you handle.

Registration is a form plus a fee, not an inspection. The Commissioner is not asking you to prove you are perfect, only to declare who you are and what you do with personal data.

Priva walks you through the details you need and keeps them in one place, so the information you submit matches what your records actually say.