Processes biometric data, in Mauritius

Data Protection Act 2017 (Act No. 20 of 2017), s. 29 (special categories of personal data) · Read the law's page

• Do not process a special category of personal data (including biometric data uniquely identifying a person) unless one of the specific grounds in section 29(1) applies, in addition to the Act's general lawful-processing requirement.
• Handle special-category health data only by or under a person bound by professional secrecy where the processing is for preventive or occupational medicine, diagnosis, or healthcare.