West Africa / Ghana
AvailableGhana's privacy framework. Connected to your programme.
Data Protection Act, 2012 (Act 843)
Turn local requirements into assigned work, linked records and evidence you can review.
Ghana · in hlola
The framework at a glance.
Ghana's data protection law, enforced by the Data Protection Commission.
- Country
- Ghana
- Primary legislation
- Data Protection Act, 2012 (Act 843)
- Regulator
- Data Protection Commission (Ghana)
- Statutory clocks
- Breach notice 72 hours · rights requests 30 days
Key areas
From requirements to practical work.
- Governance2 controls to evidence
- Principles1 control to evidence
- Lawfulness1 control to evidence
- Retention1 control to evidence
- Security1 control to evidence
- Third parties1 control to evidence
- Incidents1 control to evidence
- Rights1 control to evidence
- Special categories1 control to evidence
- Records1 control to evidence
See how the work connects.
Move from a requirement to the record, owner and evidence behind it.
Explore platform featuresStatuses support programme review; they are not legal certification.Illustrative records
What an inspector checks
11 controls, mapped to the Act.
GH-001 · Sections 46 to 53
Register with the Data Protection Commission
Data controllers must register with the Data Protection Commission before processing personal data, and renew the registration when it lapses.
GH-002 · Section 58
Appoint a data protection supervisor
Appoint a qualified data protection supervisor to monitor the organisation's compliance with the Act.
GH-003 · Section 17
Apply the data protection principles
Process with accountability, lawfulness, specified purpose, compatibility of further processing, quality, openness, security safeguards and data subject participation.
Three are shown here; the full set, with tasks and evidence guidance, is in hlola.
Bring Ghana into your privacy programme.
See your readiness against Ghana DPA in a demo set up for your organisation.