PRESENT RISK 34. Data protection impact assessment 35. Prior authorisation and consultation PART VI – TRANSFER OF PERSONAL DATA OUTSIDE MAURITIUS 36. Transfer of personal data outside Mauritius PART VII – RIGHTS OF DATA SUBJECTS 37. Right of access 38. Automated individual decision making 39. Rectification, erasure or restriction of processing 40. Right to object 41. Exercise of rights PART VIII – OTHER OFFENCES AND PENALTIES 42. Unlawful disclosure of personal data 43. Offence for which no specific penalty provided PART IX – MISCELLANEOUS 44. Exceptions and restrictions 45. Annual report 46. Compliance audit 47. Codes and guidelines 48. Certification