Visa Contractor in Morocco Exposed for Illegal Data Transfer to Foreign Governments

Events such as the receipt of a complaint, an investigation suggesting possible anomalies in the declaration of personal data processing by a data controller, a control program decided by the Commission, and finally the receipt of information through the press or institutional channels, prompted the National Commission for the Control of Personal Data Protection (CNDP) to investigate (unannounced control) TLS Contact. The investigations proved fruitful: its services found "the existence of a regular (every 5 minutes) transfer of images extracted from video surveillance recordings to two government institutions abroad." Information confirmed by the data protection officer within the company during a hearing held on January 6.

To read:

"The failure to notify this transfer to the CNDP constitutes in itself an offense under the provisions of Chapter VII of Law No. 09-08 and exposes its perpetrator to the sanctions provided for therein," the authority states in a press release. "Without prejudging the sanctions that will be notified," the CNDP specifies that it is continuing "the investigation of this file while having notified the data controller of the obligation to bring all its personal data processing into compliance within a period not exceeding February 28, 2023." The competent authorities concerned have already been informed of this case.

To read:

Consulted by Le Desk, sources close to TLS Contact justified the "wrongdoing" by the desire of government institutions abroad to compare applicants to the existing database they have by cross-checking fingerprints with photos.