Process sensitive personal data and children data under enhanced conditions in Sections 24 and 25. Sensitive Personal Data definition (Section 2) includes racial or ethnic origin + political opinions + religious or philosophical beliefs + trade union membership + genetic data + biometric data + data concerning health + data concerning sex life or sexual orientation + criminal convictions and offences. Section 24 sensitive data processing prohibited unless one of the lawful conditions applies: explicit consent + employment + social security or social protection law + vital interests where subject incapable of consent + non-profit body with appropriate safeguards + manifestly public + legal claims + reasons of substantial public interest + healthcare provided by professional bound by secrecy + public health + archiving/scientific/historical research or statistical purposes with safeguards. Section 25 children digital consent age 16 (default GDPR alignment) + parental responsibility for under 16 + age verification reasonable efforts. Mauritian schools and educational institutions under Ministry of Education guidance + ICT in Education programme child data minimisation. Health data under Ministry of Health and Wellness coordination + Hospital Information Systems data sharing controls. Biometric data Aadhar-like + national ID + workplace surveillance restrictions under DPO Mauritius Guidance Note 1/2018 on Biometric Data Processing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.