RE: Linking civil registration and vital statistics to identity management systems

From: S Moonesamy <sm+mu_at_elandsys.com>
Date: Thu, 20 Apr 2017 02:15:06 -0700


Dear Sir/Madam,

Thank you for the answers which were sent on 13 April.

I went to
http://attorneygeneral.govmu.org/English/LawsofMauritius/Pages/default.aspx
to find the laws and regulations related to the
National identity Card and I clicked on the link
for "GN - Year
2015".
http://attorneygeneral.govmu.org/English/LawsofMauritius/Pages/GN---Year-2014.aspx
displays two URLs; the first one to regulation
under the Curatelle Act and the second one to a
regulation under Revision of Laws Act. There
isn't any National Identity Card Act listed (
http://attorneygeneral.govmu.org/English/Pages/A-Z%20Acts/N/Page-1.aspx
). The Acts available are for the years 2009 to
2014. I used the search feature to search for
"National Identity Card". It did not display any
relevant results (
http://www.elandsys.com/~sm/govmu-org-nic-search-201704.png
). I also looked for the Civil Status Act. The
Act is not displayed in the listing at
http://attorneygeneral.govmu.org/English/Pages/A-Z%20Acts/C/Page-1.aspx

It is unfortunate that the first answer would not
help a citizen to find information about the laws
and regulations related to the National Identity Card or the Civil Status Act.

There is a Press Communiqué from the Ministry of
Technology, Communication and Innovation which
states that the deletion exercise was conducted
in the presence of officers from the Data
Protection Office. Would it be possible for the
Data Protection Office to confirm that the data
controller has complied with its responsibility
to destroy all fingerprints which were stored in
the Civil Identity Register in September 2015?

According to the Mauritius National Identity Card
Unit, the steps to register for a National
Identity Card are in the following sequence:

   1. Capture of Fingerprint (to extract fingerprint minutiae ONLY)
   2. Capture of photograph in jpeg format.
   3. After Registration process, citizens have to verify their personal
      details and sign a User Declaration Form

Is the informed consent (Step 3) in line with the
Data Protection Act given that the sensitive
personal data is being collected and processed
before the citizen is allowed to read the User Declaration Form?

The response (fourth answer) about the sharing
data of with other government agencies without
consent is quite worrying especially when the
data controller for the National Identity Card
has been unresponsive to my queries about data linkage.

Regards,
S. Moonesamy
Received on Thu Apr 20 2017 - 09:15:44 PST

This archive was generated by hypermail 2.3.0 : Thu Apr 20 2017 - 09:18:01 PST