Data protection
The Data Protection Act 2012 is administered by the Data Protection Commission, and registration of data controllers is its distinctive feature.
Protection rests on the Data Protection Act 2012, administered by the Data Protection Commission, which requires data controllers to register. Registration of data controllers is a distinctive feature, and enforcement has focused on unregistered processing.
Key points
| Regulator | Data Protection Commission of Ghana |
|---|---|
| Offences | Unlawful processing and failure to register are offences |
| Right to prevent processing | Where it causes damage or distress |
| Enforcement capacity | Limited, with registration the main focus |
In practice
- Ask whether the organisation is registered: unregistered processing is itself unlawful.
- Complain to the Commission in writing with the dates and evidence.
Where to go
- Data Protection Commission of Ghana — complaints and guidance.
Worth knowing
Checking the register is a quick and effective first move: many organisations processing personal data have never registered, which is an offence in itself.
The general article: Data protection · Compare with another country
Privacy
Article 18(2) of the Constitution protects privacy of home, property, correspondence and communication. The Data Protection Act 2012 created the Data Protection Commission and requires data controllers to register. Enforcement resources have been limited, but registration requirements are actively pursued.
Ghana's 1992 Constitution protects privacy of home, property, correspondence and communication, and the Data Protection Act of 2012 created a Data Protection Commission with a registration regime for data controllers and rights of access and correction. Enforcement capacity is limited, and most practical remedies come from the Cybersecurity Act, which criminalises non-consensual sharing of intimate images and cyberstalking.
Key points
| Constitution | Article 18(2): home, property, correspondence and communication |
|---|---|
| Statute | Data Protection Act 2012, one of the earliest in West Africa |
| Regulator | Data Protection Commission |
| Registration | Data controllers must register and renew |
| Individual rights | Access, correction, prevention of processing causing damage or distress |
| Court | High Court enforcement of fundamental human rights under Article 33 |
| CHRAJ | Handles complaints against public bodies free of charge |
| Court route | Article 33 enforcement in the High Court |
In practice
- Check the register: unregistered processing is a straightforward breach to plead.
Where to go
- Commission on Human Rights and Administrative Justice.
- Legal Aid Commission.
Worth knowing
CHRAJ handles complaints against public bodies free of charge and is often the quicker route where the intrusion comes from an official source. CHRAJ is free and has offices nationwide, which makes it the practical first step against any public body.
Frequently asked questions
What rights does the Data Protection Act give?
Access to the personal data an organisation holds about you, correction of inaccurate data, and the right to object to processing, with complaint to the Data Protection Commission. Organisations processing personal data are required to register with the Commission, which is the main compliance lever.
Image rights
The Cybersecurity Act 2020 criminalises the non-consensual sharing of intimate images and gives the Cyber Security Authority a reporting and response role, with a dedicated short code. The Data Protection Act 2012 applies to identifiable images, and the Constitution protects the privacy of correspondence and communication.
Key points
| Statute | Cybersecurity Act 2020, section 66 |
|---|---|
| Reporting | Cyber Security Authority, with a dedicated short code and online channels |
| Data protection | Data Protection Act 2012 |
| Constitution | Article 18(2) |
| Related offences | Extortion and threats under the criminal code |
| Children | Aggravated offences where the person depicted is a child |
| Section 66 | Non-consensual sharing of intimate images is a specific offence |
| Short code | The Cyber Security Authority operates a dedicated reporting line |
In practice
- Report through the Cyber Security Authority as well as to the police.
Where to go
- Cyber Security Authority reporting channels.
- Ghana Police Service Cybercrime Unit.
- Commission on Human Rights and Administrative Justice.
Worth knowing
Where the image is being used to demand money, that is extortion as well as an image offence: say so in the report, because it changes which unit handles the case. Ghana's Cybersecurity Act contains an express offence, which many victims and some officers are unaware of. Cite the section when reporting.
The general article: Image rights · Compare with another country
Speech and online harassment
Criminal libel was abolished in 2001, leaving civil defamation alongside the Cybersecurity Act 2020.
The framework rests on constitutional protection of expression, with criminal libel abolished in 2001 — an early and widely cited reform — leaving civil defamation and the Electronic Communications Act. The Cybersecurity Act 2020 established a national authority handling online harm reports, including image-based abuse.
Key points
| Criminal libel repealed | Repealed in 2001, a landmark for press freedom in the region |
|---|---|
| Civil defamation | The remaining route for reputational harm |
| Electronic Communications Act | Covers offensive electronic communications |
| Cyber Security Authority | Reporting channels for online abuse |
In practice
- Use civil proceedings for defamation; criminal libel no longer exists.
- Report online abuse through the Cyber Security Authority channels.
Where to go
- Cyber Security Authority reporting points.
- Ghana Police cybercrime unit.
- Media Foundation for West Africa.
Worth knowing
Ghana repealed criminal libel in 2001 and has not reinstated it. Any threat of criminal prosecution for defamation has no legal basis.
The general article: Speech and online harassment · Compare with another country
Copyright
The Copyright Act 2005 protects works for the author's life plus seventy years and operates a registration system through the Copyright Office. Ghana also protects expressions of folklore: their use for commercial purposes requires authorisation from the National Folklore Board, including by Ghanaians, a rule found in only a handful of countries.
Ghana's Copyright Act of 2005 protects works for the author's life plus seventy years and contains something less common: protection for expressions of folklore, which are vested in the state and require authorisation for commercial use, including by Ghanaians. The Copyright Office handles registration, which is voluntary but valuable as evidence, and collecting societies administer music rights.
Key points
| Statute | Copyright Act 2005 |
|---|---|
| Registration | Available through the Copyright Office; commonly used |
| Folklore | Commercial use of expressions of folklore requires authorisation from the National Folklore Board |
| Permitted use | Private use, quotation, teaching, reporting |
| Enforcement | Copyright Office, police, and the High Court |
| Criminal enforcement | Copyright offences are prosecuted by the Copyright Office |
In practice
- Clear folklore rights before any commercial use of traditional patterns or melodies.
Where to go
- Copyright Office of Ghana.
- National Folklore Board.
- GHAMRO for music rights.
Worth knowing
The folklore provisions catch uses that most creators assume are free — traditional patterns, melodies and stories — and the authorisation requirement applies to nationals too. The folklore provisions catch uses most creators assume are free, and the authorisation requirement applies to nationals as well as foreigners.
Frequently asked questions
What is folklore protection in Ghana?
The Copyright Act protects expressions of folklore — traditional music, designs, symbols including adinkra, and forms of expression — and vests the rights in the state in perpetuity. Commercial use requires permission from the National Folklore Board, and this applies to Ghanaians as well as foreigners.
The general article: Copyright · Compare with another country
Identity theft
The Cybersecurity Act and the criminal code cover impersonation; the Ghana Card and mobile money are the pressure points.
Identity fraud is prosecuted under the Cybersecurity Act 2020 and under criminal code provisions on defrauding by false pretences. The Ghana Card is now central to banking and SIM registration, which concentrates the risk. The Cyber Security Authority operates dedicated reporting channels including a short code.
Key points
| Statutes | Cybersecurity Act 2020 and the Criminal Offences Act |
|---|---|
| Ghana Card | Required for banking and SIM registration; report loss to the NIA |
| Mobile money | Report to the operator immediately; reversals depend on speed |
| Reporting | Cyber Security Authority short code and the police cybercrime unit |
| Data protection | Data Protection Commission for the underlying breach |
| Banking | Bank of Ghana complaints channel for unresolved disputes |
In practice
- Report a lost Ghana Card to the National Identification Authority and to the police.
- Call your mobile money provider's fraud line immediately.
- Report to the Cyber Security Authority and keep the reference.
- Ask your bank for a list of accounts opened against your identity.
Where to go
- Cyber Security Authority reporting channels.
- National Identification Authority.
- Bank of Ghana consumer complaints.
Worth knowing
SIM registration against the Ghana Card means a stolen card can be turned into a phone number and then into mobile money: report a lost card the same day.
The general article: Identity theft · Compare with another country
Online shopping
Consumer protection is administered by the Ghana Standards Authority and the Ministry of Trade, with mobile money complaints handled by operators.
Protection comes from consumer protection provisions administered by the Ghana Standards Authority and the Ministry of Trade, alongside the Electronic Transactions Act. Mobile money complaints are handled by operators under Bank of Ghana rules, with an escalation route to the regulator.
Key points
| No single consumer statute | Protection comes from sale of goods law and sector regulators |
|---|---|
| Sale of Goods Act | Implied conditions as to quality and fitness |
| Sector regulators | Communications, energy and financial regulators handle their own complaints |
| Reform | A consumer protection bill has been under consideration |
In practice
- Identify the sector regulator: it is usually more effective than a general complaint.
Where to go
- Ghana Standards Authority.
- Bank of Ghana for mobile money disputes.
- Consumer advocacy organisations.
Worth knowing
With no general consumer agency, sector regulators are the practical route. For ordinary retail purchases the courts are the only forum.
The general article: Online shopping · Compare with another country
Romance scams
A cyber security authority with a dedicated reporting line, and a central bank complaints route.
The national cyber security authority operates a reporting and advice line for cybercrime, including online fraud and sextortion. The police cybercrime unit handles criminal investigation, and the central bank receives complaints about banks and mobile money providers that fail to act.
Where to go
- National cyber security authority reporting line
- Mobile money provider, immediately, for a block or reversal
- Central bank complaints route
Sources
- Cyber Security Authority — report a cybercrime — call or text 292 (24/7), WhatsApp 050 160 3111 or report@csa.gov.gh; a call before the money is withdrawn can get the transfer intercepted
- Your mobile money provider's fraud line — the fastest lever: call before the funds are withdrawn
- eConsumer.gov — international channel for scams committed from abroad
The general article: Romance scams · Compare with another country
General sources
- Ghana.gov — official government portal