Introduction

The Ministry of Information Technology, Communication and Innovation of the Republic of Mauritius respects the privacy of users. This Privacy Policy explains how the Ministry collects, uses, discloses, and safeguards information when citizens visit the Ministry’s website maupass.govmu.org and mobile application, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Site”).

The Ministry reserves the right to make changes to this Privacy Policy at any time and for any reason. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site.

Collection of Information for National Authentication Framework

The National Authentication Framework (NAF) is a Government centralized authentication platform that caters for identity and access management, whereby citizens and non-citizens can transact conveniently and more securely with the government. The main purpose of implementing NAF is to provide a single authentication window to consumers accessing Government e-services. This would provide a great degree of convenience as the user (citizen and non-citizen) need to remember only one user ID and password to access any Government e-services.

NAF will allow a centralised way of providing authentication facility via inter alia sms, email and mobile authentication for a number of e-services/m-services to citizens/non-citizens. The Ministry may collect information about users in a variety of ways. The information collected on the Site includes:

• Personal Data: The following Personally identifiable information, name, address, email address, telephone number, and gender.
• Derivative Data: The NAF servers automatically collect the following information, user IP address, browser type, operating system, logs, access times, and the pages viewed directly before and after accessing the Site. If the user is on mobile application, this information may also include the device name and type, the operating system, the phone number, the country and other interactions with the application. Logs are not shared with any third party and may only be disclosed, if required, to police and investigating agencies in accordance with applicable law.
• Mobile Device Data: The following device information, the mobile device ID, model, and manufacturer, and information about the location of the device, if the Site is accessed from a mobile device.

Use of User Information

Having accurate information about the user permits the Ministry to provide a smooth, efficient, and customized experience. Specifically, information may be collected about a user via the Site or the mobile application to:

• Assist in law enforcement and respond to subpoenas,
• Compile anonymous statistical data and analysis for use internally or with third parties,
• Create and manage user account,
• Send email and sms to users regarding user account or order,
• Enable user-to-user communications,
• Generate a personal profile about the user for other Government sites,
• Increase the efficiency and operation of the Site and the user mobile application,
• Monitor and analyze usage and trends to improve user experience with the Site and the mobile application,
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity,
• Respond to user service requests.

Disclosure of User Information

The Ministry may share information collected about users with other Ministries and departments as provided by appropriate legislation.

Tracking Technologies

Cookies and Web Beacons

The Ministry may use cookies on the Site and the mobile application for better user experience. When users access the Site or the mobile application, user personal information is not collected through the use of tracking technology. Most browsers are set to accept cookies by default. Users will be notified of the usage of cookies and may reject same, but such action could affect the availability and functionality of the Site or the mobile application.

Security of User Information

The Ministry will ensure that the personal information/data is stored securely at the Government Online Centre (GOC), data centre of Government. The Ministry has taken reasonable steps to secure the personal information users provide.

Options Regarding User Information

Account Information

Users may at any time review or change the information in user account or terminate user account by:

• Logging into user account settings and updating user accounts
• Contacting the Ministry using the contact information provided below

Users need to ensure that their details (e.g. contact detail used for OTPs) are always accurate and up-to-date.

Upon user request to terminate his account, the Ministry will deactivate or delete the user account and information from the active databases. However, some information may be retained in the Ministry’s files to troubleshoot problems, assist with any investigations, enforce the Ministry’s Terms of Use, comply with legal requirements and prevent fraud.

Emails and Communications

If the user does no longer wish to receive correspondence, emails, or other communications from the Ministry, he/she may opt-out by:

• Noting his/her preferences at the time the user register his/her account with the Site or the mobile application,
• Logging into user account settings and updating his/her preferences,
• Contacting the Ministry using the contact information provided below.

However, the user account will be deleted 6 months after the user has indicated his wish to opt out of NAF.

Data Privacy Pertaining to e-KYC on MauPass Mobile App

Accessing some eServices require two-factor authentication (2FA) through MauPass accounts. Mauritians and foreigners can go to the nearest post offices in Mauritius for a KYC session to activate their 2FA. Users who cannot go to Post Offices in Mauritius, can use the e-KYC feature which is available on MauPass mobile app to activate two-factor authentication for their MauPass account.

A user who wishes to do e-KYC on the MauPass mobile app, will have to download and install the app from Google Play Store, Apple App Store or Huawei App Gallery. Once logged in, users will be able to do e-KYC by taking a selfie and then taking a photo of their new smart biometric National Identity card or their valid (not expired) passport issued in Mauritius. The MauPass mobile app will detect liveness of the selfie to ensure a genuine user is doing the transaction and will extract details including photograph from the NIC or Passport.

The details in the NIC or Passport will be compared with the user’s details in his/her MauPass account, and the photograph will be compared with the selfie for a facial match. If the data matches and the facial comparison succeeds, 2FA is activated on the user’s MauPass account.

All the data pertaining to the selfie and the image of the document scanned (NIC or Passport) are automatically purged after 60 seconds both for successful and failed transactions. These data are not shared with any third party. As a controller, we comply with the provisions of the Data Protection Act 2017 for processing personal data.

Contact Information

The Permanent Secretary

7th Floor Ministry of Information Technology, Communication and Innovation,
SICOM Tower,
Wall Street,
EBENE.
Republic of Mauritius