Mauritius DPA 35: Section 35: obtain prior authorisation or consult the Office

A controller or processor must obtain the Office's authorisation before processing where it cannot provide the section 36 appropriate safeguards for a transfer abroad, and must consult the Office before processing where a DPIA shows likely high risk or the Office considers prior consultation necessary for high-risk operations (the Office publishes the list). It supplies the DPIA and any other information requested; where the Office finds the intended processing non-compliant it prohibits it and proposes remedies.