Privacy Policy

1. Introduction

The Anti-Corruption Commission of the Republic of Maldives ("ACC", "we", "us") operates the Public Service Portal ("Portal") to provide citizens with secure online access to ACC services. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Portal.

By using the Portal, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Portal.

2. Information We Collect

We collect information necessary to provide and improve our services:

• Identity information - Your full name, National Identity Card number, date of birth, gender, and nationality, retrieved from eFaas upon authentication.
• Contact information - Email address and phone number, as provided through eFaas or entered directly by you.
• Address information - Permanent and current address, as registered with relevant government authorities.
• Submission data - Information you provide when submitting complaints, RTI requests, record clearance applications, or appointment requests.
• Usage data - Log data including your IP address, browser type, pages visited, and timestamps, collected automatically for security and operational purposes.

3. How We Use Your Information

Your information is used exclusively for the following purposes:

• To verify your identity and authenticate your access via eFaas.
• To process and manage your service submissions (complaints, RTI requests, clearance certificates, appointments).
• To communicate with you about the status of your submissions.
• To comply with legal obligations under the Anti-Corruption Commission Act (Law No. 13/2008) and other applicable Maldivian law.
• To maintain the security and integrity of the Portal.
• To improve Portal functionality and user experience.

We do not use your personal information for marketing purposes, nor do we sell or rent your information to third parties.

4. eFaas Authentication

The Portal uses eFaas - the Maldives National Digital Identity Platform - for user authentication. When you sign in, eFaas shares your identity information with the Portal under your authorization. The eFaas platform is operated by the National Centre for Information Technology (NCIT) and is subject to its own privacy policy available at efaas.gov.mv.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, and as required by law. Submission records (complaints, RTI, clearance, appointments) are retained in accordance with the ACC's records management policy. Access logs are retained for a minimum of 12 months for security audit purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (TLS). Access to personal data is restricted to authorised ACC staff on a need-to-know basis.

7. Your Rights

Under applicable Maldivian law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at [email protected].

8. Contact

For questions or concerns about this Privacy Policy, contact the Anti-Corruption Commission: