Makes high-risk automated decisions, in Mauritius

Data Protection Act 2017 (Act No. 20 of 2017), s. 38 (automated individual decision making) · Read the law's page

• Do not base a decision producing a legal or similarly significant effect on a data subject solely on automated processing, including profiling, unless a listed exception (contractual necessity, a safeguarded legal authorisation, or the data subject's explicit consent) applies.
• Do not base automated processing intended to evaluate personal aspects of an individual on special categories of personal data.