Skip to main content

    AI by country · Southern Africa

    AI in Mauritius: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Mauritius know before starting with AI?

    Mauritius has no dedicated AI law as of 29 October 2026. The Data Protection Act 2017 is the law that applies to AI today, and the National AI Strategy 2025 to 2029 comes with non-binding FAIR Guidelines. A company should register with the Data Protection Commissioner, prepare for the new rules on data protection officers from 1 January 2027, and add human oversight to AI that affects people.

    At a glance

    Mauritius at a glance

    Key facts about Mauritius
    Data protection lawData Protection Act 2017 (Act 20 of 2017), in force since 15 January 2018
    RegulatorData Protection Office, headed by the Data Protection Commissioner
    AI policyNational AI Strategy 2025 to 2029 and FAIR Guidelines (launched 9 April 2026, non-binding). No dedicated AI law as of 29 October 2026
    Time zoneMUT, UTC+4 (India is 1.5 hours ahead)
    CurrencyMUR (Mauritian rupee)
    Business languageEnglish and French

    Why now

    Why Mauritius is worth watching

    Each point links to the document it comes from.

    • Mauritius launched its first National AI Strategy, covering 2025 to 2029, and the FAIR Guidelines on 9 April 2026, after Cabinet agreed to adopt them on 13 February 2026.[5]

    • The strategy is run by an AI Unit in the Ministry of Information Technology, Communication and Innovation and sits within the Digital Transformation Blueprint 2025 to 2029.[3]

    • The 2026 to 2027 budget, presented on 19 June 2026, plans a national AI guide on ethical use and responsible AI training for 5,000 civil servants.[6]

    • New regulations on data protection officers take effect on 1 January 2027 and require every controller to appoint a certified DPO from its staff.[7]

    • The Financial Services Commission has licensed robotic and AI-enabled advisory services since 2021.[8]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Data Protection Act 2017: automated decisions, impact assessments and breaches

    In force2017People have the right not to be subject to a decision based solely on automated processing, including profiling, with legal or significant effects, unless it rests on a contract, a law or explicit consent; automated evaluation must not be based on special categories of data (section 38). An impact assessment is required before automated profiling with significant effects or large-scale special category data (section 34). Breaches go to the Commissioner within 72 hours where feasible (section 25).[1]

    Data Protection Act 2017: registration, transfers and penalties

    In force2017No one may act as a controller or processor without registering with the Commissioner, and certificates last three years (sections 14 to 18). Transfers abroad need proof of safeguards given to the Commissioner, explicit consent or another listed ground (section 36). Offences without a specific penalty carry a fine of up to MUR 200,000 and up to five years in prison (section 43).[1]

    Data Protection (Designation, Tasks and Position of Data Protection Officers) Regulations 2026

    Passed, not yet in force2026From 1 January 2027 every controller must appoint a DPO from its own staff, certified by the Data Protection Office or an accredited trainer. We read this in a law firm summary, not the regulation text.[7]

    FAIR Guidelines for the Development and Use of Artificial Intelligence

    In force2026The guidelines say they are non-binding and do not create legal obligations. They expect human oversight scaled to risk, testing, documentation and stronger safeguards for AI used in decisions on rights, eligibility or essential services. They are meant to inform future sector rules.[4]

    Where AI fits first

    Where AI fits first

    Financial services and global business

    Document review, client onboarding checks and investment research support.

    Giving automated investment advice needs a Robotic and AI Enabled Advisory Services licence from the FSC.[8]

    Public services

    Multilingual chat assistants and faster licence processing.

    The 2026 to 2027 budget plans AI in the National Electronic Licensing System, including a multilingual chatbot.[6]

    Health care

    Summarising patient records and triage support, with clinicians making decisions.

    Health data is a special category under the Act, so large-scale processing needs an impact assessment.[1]

    Education

    Learning support tools and lesson preparation, with teachers in charge.

    The budget plans AI training for 8,000 secondary teachers and AI learning tools for 12,000 students.[6]

    Your first steps

    Your first steps

    1. Register with the Data Protection Commissioner as a controller or processor, and renew before the three-year certificate expires.
    2. Choose a staff member as data protection officer and plan their certification before 1 January 2027.
    3. Run an impact assessment before AI that profiles people or uses special category data at scale.
    4. Give people a way to get human review of automated decisions with significant effects.
    5. Check every transfer of personal data abroad against section 36 and keep proof of safeguards.
    6. Set up a breach process that can notify the Commissioner within 72 hours.
    7. Read the FAIR Guidelines and match your human oversight to the risk of each AI use.

    AI services for Mauritius

    AI consulting and development for teams in Mauritius

    We work remotely with companies in Mauritius, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Mauritius is on UTC+4 and India on UTC+5:30, a 1.5 hour gap. Taking a 9:00 to 17:00 day in Mauritius and 9:30 to 18:30 in India, the overlap is about 8 hours, the full Mauritian working day from 09:00 to 17:00.

    Questions

    Common questions about AI in Mauritius

    Does Mauritius have an AI law?

    Not as of 29 October 2026. It has a National AI Strategy for 2025 to 2029 and FAIR Guidelines, both launched in April 2026. The guidelines say they are non-binding. The Data Protection Act 2017 applies to AI that uses personal data.

    Do the FAIR Guidelines bind my company?

    No. They state that they do not create legal obligations or replace existing laws. They are a reference point and may shape future sector rules, so following them now is sensible.

    How fast must I report a data breach?

    Without undue delay and, where feasible, within 72 hours of becoming aware of it, under section 25 of the Data Protection Act 2017. A late notice must give the reasons for the delay.

    Do I need a data protection officer?

    From 1 January 2027, every controller must appoint a certified DPO from its staff under the 2026 DPO regulations, according to a law firm summary. Check the regulation text with the Data Protection Office.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Republic of Mauritius (consolidated copy hosted by AFRINIC), 2018-01-15. The Data Protection Act 2017 (Act 20 of 2017), updated(afrinic.net)
      Full title and what we used it for

      The Data Protection Act 2017 (Act 20 of 2017), updated. Primary law text, consolidated to include Act No. 1 of 2020. Read in full. Used for Proclamation No. 3 of 2018, and sections 14 to 18, 25, 34, 36, 38 and 43. The Data Protection Office's own copy link returned an error.

    2. [2] Data Protection Office, Government of Mauritius, 2026-10-29. Data Protection Office home page(dataprotection.govmu.org)
      Full title and what we used it for

      Data Protection Office home page. Primary. Used to confirm registration and renewal services and DPIA and transfer guidance. No AI guidance was listed.

    3. [3] AI Unit, Ministry of Information Technology, Communication and Innovation, 2026-10-29. AI for Mauritius (AIM)(aim.govmu.org)
      Full title and what we used it for

      AI for Mauritius (AIM). Primary. Used for the strategy period 2025 to 2029, the AI Unit and the link to the Digital Transformation Blueprint.

    4. [4] AI Unit, Ministry of Information Technology, Communication and Innovation, 2026-04-09. FAIR Guidelines for the Development and Use of Artificial Intelligence(aim.govmu.org)
      Full title and what we used it for

      FAIR Guidelines for the Development and Use of Artificial Intelligence. Primary. Read in full. Used for the non-binding status and the expectations on human oversight and higher-risk uses.

    5. [5] Comsure Group, 2026-04-09. Mauritius launches National AI Strategy and FAIR rules: ethics first, l…(comsuregroup.com)
      Full title and what we used it for

      Mauritius launches National AI Strategy and FAIR rules: ethics first, law later. Compliance firm summary citing Cabinet highlights. Used for the Cabinet decision of 13 February 2026 and the 9 April 2026 launch date. We did not read the Cabinet highlights ourselves.

    6. [6] Ecofin Agency, 2026-06-22. Mauritius unveils AI and tech hub strategy to move up the digital value…(ecofinagency.com)
      Full title and what we used it for

      Mauritius unveils AI and tech hub strategy to move up the digital value chain. Press report of the 2026 to 2027 budget. Used for the AI guide, training figures and public service AI plans. We could not reach the Ministry of Finance budget site.

    7. [7] ENSafrica, 2026-06-30. The new DPO regulations: five things Mauritian organisations need to kn…(ensafrica.com)
      Full title and what we used it for

      The new DPO regulations: five things Mauritian organisations need to know. Law firm summary, used for interpretation. Used for the regulation title, the 1 January 2027 start and the DPO duties.

    8. [8] Afriwise, 2021-12-15. The FSC issues the Financial Services (Robotic and Artificial Intellige…(afriwise.com)
      Full title and what we used it for

      The FSC issues the Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021. Legal information service. Used for the existence of the licence for AI-enabled advisory services. The FSC's own rules PDF did not load for us.

    This is general information, not legal advice. Several points, including the DPO regulations and budget plans, come from law firm or press summaries. Check with a qualified Mauritian lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Mauritius?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score