Member Circular: Data Protection Commission Intensifies Sector-Based Compliance and Enforcement Measures

The Ghana Employers’ Association (GEA) wishes to bring to the attention of all member companies a recent communication received from the Data Protection Commission (DPC) regarding ongoing efforts to strengthen compliance with the provisions of the Data Protection Act, 2012 (Act 843).

In its correspondence to the Association, the Commission indicated that it is engaging sector regulators and representative institutions to reinforce data protection compliance across regulated entities. According to the Commission, recent monitoring activities have revealed varying levels of compliance among organizations, prompting a renewed focus on enforcement and sector-wide awareness.

The Commission has specifically highlighted the following areas as priorities for all institutions that process personal data:

• Compliance with the provisions of the Data Protection Act, 2012 (Act 843);
• Registration and renewal of registration with the Data Protection Commission, as required under Sections 46–56 of the Act;
• Integration of data protection requirements into organizational governance, supervisory, and internal control systems;
• Adoption of appropriate technical and organizational security safeguards to protect personal data;
• Strengthening lawful data processing practices and personal data breach notification mechanisms;
• Designation and adequate resourcing of Data Protection Officers (DPOs) in accordance with the Act.

The DPC has further indicated its intention to intensify sector-focused engagements and compliance monitoring activities as part of Ghana’s broader digital transformation agenda. Organizations that collect, store, process, transmit, or otherwise manage personal data are therefore encouraged to review their current compliance status and take the necessary corrective measures where gaps exist.

GEA strongly encourages all members to undertake an internal assessment of their data protection practices and ensure that their organizations remain compliant with the requirements of Act 843. Particular attention should be paid to registration status, data security measures, employee awareness, privacy policies, breach response procedures, and the appointment of competent Data Protection Officers.

Members requiring further information on registration, renewal, or compliance support may contact the Data Protection Commission through +233256301533 or send an email to info@dataprotection.org.gh