It starts with good intentions. A small business in Mauritius doesn't want to spend Rs 300,000 on laptops for a new team. So instead, employees use their own phones. Maybe the manager pays a Rs 2,000 monthly allowance to cover the inconvenience. It seems practical. It seems cheap. Until something goes wrong — and something always does.
In this article we look at the real risks of letting your staff use personal devices for work, why those risks are growing, and what the alternative looks like in practice for Mauritian businesses.
When a personal device becomes a work device, your business data sits on hardware you don't own, can't control, and can't recover when the employee leaves or the device is lost.
The six risks — in plain language
Your data leaves with the employee
Client contacts, pricing, emails, contracts — all stored on a personal phone that walks out the door on the last day of employment. There is no technical way to recover it.
You can't wipe or lock a personal device
On a company-issued device, IT can remotely wipe all data the moment an employee leaves. On a personal device, you have no such right — and no such capability.
Data protection law applies to you
Under Mauritius's Data Protection Act 2017, businesses are responsible for how client and personal data is stored and handled — even on personal devices used for work.
No standardisation, no control
15 employees = 15 different operating systems, apps, security settings and backup behaviours. IT support becomes impossible. Training is a nightmare.
It's not actually cheaper
Rs 2,000 phone allowance × 12 months × 10 staff = Rs 240,000/year. With zero control, zero data security and zero support. That's more than renting company devices all-inclusive.
Accounting complications
Phone allowances paid to employees may be treated as taxable benefits under MRA guidelines. Rental of company devices is a clean, fully deductible business expense with no ambiguity.
The scenario no business owner wants to think about — until it happens
A sales manager at a mid-size Mauritian company leaves after three years. On their personal phone: the entire customer contact list, three years of WhatsApp conversations with clients, the company price list, and login credentials for the company CRM. They join a competitor the following month. The business has no legal or technical means of recovering any of that data. The only way this ends differently is if the devices were company-owned.
This scenario happens more often than most business owners realise. It rarely ends in a formal dispute — most of the damage happens quietly, through lost relationships and competitive intelligence that flows silently to a rival.
What Mauritius's Data Protection Act means for your business
The Data Protection Act 2017 (DPA 2017), which came into force in January 2018, is Mauritius's equivalent of GDPR. It places specific obligations on businesses regarding how personal data — including client names, contact details and financial information — is stored and processed.
Under the DPA 2017, your business is considered the "data controller" for any client or personal data processed in the course of your operations. That includes data sitting on an employee's personal phone used for work. If that phone is lost, stolen or compromised, and the data on it falls into the wrong hands, your business faces:
- Potential enforcement action by the Data Protection Commissioner
- Fines of up to Rs 200,000 for serious violations
- Reputational damage with clients and partners
- Civil liability claims from affected individuals
Most businesses in Mauritius are simply unaware of this exposure. The safest position is straightforward: business data should only exist on devices your business controls.
The productivity argument most managers miss
Beyond security, there's a daily productivity cost that rarely gets quantified. When employees use personal devices for work:
- Personal notifications compete with work focus throughout the day
- Employees on older or lower-spec personal phones work slower than they would on current business hardware
- There is no consistent professional experience — a client receiving a WhatsApp from someone's personal number has no assurance they're speaking to a business representative
- When a personal device breaks, it's the employee's problem — which means they're dealing with a repair, sourcing a replacement and losing work time, all on their own
A team of 10 employees each losing 20 minutes of productive time per day due to personal device limitations adds up to over 800 hours of lost productivity per year. At an average loaded staff cost of Rs 15,000/month, that's more than Rs 60,000 in real annual cost — invisible on any balance sheet, but very real in outcomes.
What the alternative looks like in practice
Company-issued devices through a rental provider like Kadadak give your business:
- Full legal ownership of every device — you can demand it back when an employee leaves
- Remote management capability — lock, wipe or track any device from anywhere
- Consistent hardware and software across your whole team — one standard, one IT support process
- 48-hour replacement when any device breaks — employee downtime is measured in hours, not weeks
- A clean operating expense — fixed monthly cost, fully tax deductible, no allowance complications
The monthly cost of renting a business smartphone for an employee starts at Rs 267/month — less than most businesses pay in phone allowances, with dramatically better control and zero data risk.
The question to ask yourself today
If your three most valuable employees left tomorrow, what business data would walk out the door with them? If the honest answer includes client contacts, pricing, communications or access credentials — and that data lives on personal devices — then the risk is already active in your business, right now.
The solution isn't complicated. It's a policy decision backed by the right hardware.
Get your team on company devices
Smartphones from Rs 267/month. Laptops from Rs 1,340/month. All-inclusive — delivery, support and 48h replacement. No upfront investment.