🇬🇭
Ghana
Data Protection Act, 2012 (Act 843)
Africa🔵 Substantial
Compliance Score
64%
9 Addressed
4 Partial
1 None
Authority
Data Protection Commission (DPC)
Overview
Ghana's Data Protection Act, effective 2012, provides a substantial framework. The DPC is the regulatory authority responsible for enforcement and guidance to organizations.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Ghana?+
Ghana is governed by the Data Protection Act, 2012 (Act 843). The law is enforced by the Data Protection Commission (DPC). According to our analysis, the country has a Substantial level of data protection framework.
Does Ghana require a Data Protection Officer (DPO)?+
Yes, under the Data Protection Act, 2012 (Act 843), organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Ghana?+
Partially. While Data Protection Act, 2012 (Act 843) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Ghana?+
Under the Data Protection Act, 2012 (Act 843), organizations must notify the Data Protection Commission (DPC) and affected individuals without undue delay in the event of a personal data breach.