CII Designation Regulations 2026 (Mauritius)

Summary

The Regulations, made by the Minister under section 51 of the Cybersecurity and Cybercrime Act 2021, govern the designation of critical information infrastructure in the financial services (banking and non-banking), public service, information and communication technology and broadcasting, energy and water supply, and transport sectors. The National Cybersecurity Committee, in consultation with the sector regulator, designates systems according to the criteria of the Act and gives public notice of the designation in the Gazette. Owners must comply with the regulator's directions under section 34 of the Act, and only persons authorised in writing may access information on the architecture, vulnerabilities and security of the infrastructure. Designations are reviewed every three years; failure to comply is punishable by a fine of up to 100,000 rupees and imprisonment of up to five years, and owners have twelve months to comply.

Information

Jurisdiction

Mauritius

Issuing body

Ministry of Information Technology, Communication and Innovation

Type

Regulation

Available languages

English

Topics

• Critical infrastructure
• Governance and coordination
• Financial sector
• Energy
• Telecommunications

Notes

Published as Government Notice No. 113 of 2026 in the Legal Supplement to Government Gazette No. 45 of 20 June 2026. Made by the Minister on 29 May 2026 and in force since 1 June 2026, that is with effect before publication. The compliance period ends twelve months after entry into force: the date is given only as a month (June 2027) because the text does not set a day. The link points to the PDF published by the Ministry of Information Technology, Communication and Innovation.

Ministry of Information Technology, Communication and Innovation. (2026). Cybersecurity and Cybercrime (Critical Information Infrastructure Designation) Regulations 2026 (GN No. 113 of 2026). https://mitci.govmu.org/mitci/wp-content/uploads/2026/06/113_The-Cybersecurity-and-Cybercrime_Critical-Information-Infrastructure-Designation_Reg-2026.pdf

Ministry of Information Technology, Communication and Innovation. "Cybersecurity and Cybercrime (Critical Information Infrastructure Designation) Regulations 2026." 29 May 2026. https://mitci.govmu.org/mitci/wp-content/uploads/2026/06/113_The-Cybersecurity-and-Cybercrime_Critical-Information-Infrastructure-Designation_Reg-2026.pdf.

@misc{mu_cii_designation_regulations_2026,
  author       = {{Ministry of Information Technology, Communication and Innovation}},
  title        = {{Cybersecurity and Cybercrime (Critical Information Infrastructure Designation) Regulations 2026}},
  year         = {2026},
  note         = {GN No. 113 of 2026},
  url          = {https://mitci.govmu.org/mitci/wp-content/uploads/2026/06/113_The-Cybersecurity-and-Cybercrime_Critical-Information-Infrastructure-Designation_Reg-2026.pdf},
  urldate      = {2026-10-29}
}