Is a listed company, in Madagascar

Loi n° 2014-038, arts. 4, 28-42, 50, 55-60, 61-73 (commission, contrôle, sanctions et pénalités) · Read the law's page

• Comply with any warning, injunction to stop processing, withdrawal of authorization, or monetary sanction the CMIL orders after an adversarial procedure, and with any urgent interruption or data-locking order it issues for up to three months.
• Give CMIL inspectors on a control mission access to your premises between six in the morning and seven at night, unrestricted access to your files, processing, and equipment, and copies of any information they request.
• Expect a monetary sanction proportioned to the seriousness of the breach and the advantage drawn from it, capped at five percent of your pre-tax turnover for the last closed financial year, doubling on a repeat offense.
• Expect criminal prosecution on top of any administrative sanction: unlawfully collecting personal data or disclosing it in a way that harms someone's reputation or privacy carries two to five years' imprisonment and a fine of 1,000,000 to 10,000,000 Ariary, and the other offenses in articles 61 to 70 carry six months to five years' imprisonment and a fine of 200,000 to 8,000,000 Ariary depending on the offense.