1.1 This policy establishes an effective, accountable and transparent framework for ensuring compliance with the requirements for the Data Protection Act (hereafter “DPA”).

2.1 This policy applies to the Mauritius Ports Authority (hereafter “THE MPA”) and to all of its employees, including part-time, temporary, or contract employees.

3.1 Rights of Access
3.1.1 Under Section 37 of the DPA, an individual has the right to obtain from the controller, confirmation as to whether personal data concerning him/her is being processed. THE MPA is committed to upholding the rights of individuals and has dedicated processes in place for providing access to personal information. Where requested, we will provide the information as described in Appendix C.
3.1.2 The rights of access applies to both manual data (which is recorded in a relevant filing system) and electronic data for the data subject. Data subjects exercise this right via a Subject Access Request (hereafter “SAR”).
3.1.3 Under the DPA, organisations are required to respond to SARs within one month. Failure to do so is a breach of legislation and could lead to a complaint being made to the Data Protection Office.
3.1.4 This policy informs staff of the process to follow when an individual exercises his/her right of access to personal data and of the right of access to staff information under the DPA.