The Data Protection Commission (DPC) in Ghana has called on institutions to enhance their data protection practices as the country experiences growing digitisation and increasing volumes of collected information. Effective data protection is crucial for safeguarding individuals' privacy and rights while mitigating risks associated with unauthorised access and data breaches. This was emphasised by Ms Hilda Odua Sowah, Accreditation and Compliance Manager at the DPC.
Ms Sowah made these remarks during a data protection awareness session in Accra, organised by the Information Services Department (ISD) in collaboration with the Ghana News Agency (GNA) and the DPC. The session was part of Customer Service Week and targeted staff from both institutions. She highlighted that data protection involves the lawful, fair, and secure processing of personal data, protecting individuals' rights and freedoms.
According to Ms Sowah, personal data includes any information that can identify an individual, such as names, ages, addresses, and other identifying details. She cautioned institutions against leaving personal information exposed in accessible areas like desks, attendance books, and computers. Ms Sowah stressed that institutions have a responsibility to protect collected personal data.
Good data protection practices can help institutions reduce the risk of data breaches, comply with legal requirements, and protect their reputation. Under the Data Protection Act, 2012 (Act 843), institutions processing personal data must register with the DPC and comply with applicable data protection requirements. This was a key point made by Ms Sowah during the awareness session.
Ms Sowah encouraged the public to act as "data protection ambassadors" by inquiring why their personal information is being collected, how it will be used, and where it will be stored. Individuals have rights, including the right to be informed, object to certain processing, prevent direct marketing, complain, and have inaccurate personal information amended.
Ms Keren Aryee, Compliance Officer at the DPC, noted that compliance with data protection regulations offers institutions several benefits, including avoiding penalties, improving customer confidence, strengthening security, and enhancing governance. She recommended that institutions train staff, conduct targeted awareness programmes, and implement security controls to protect personal information.
The awareness programme was part of efforts by the ISD and GNA to strengthen staff capacity in data protection and customer service, promoting privacy, accountability, and trust in information handling. Institutions were also urged to conduct Data Protection Impact Assessments (DPIAs) for new technologies or software involving personal data and maintain records of processing activities.
Key points
- Institutions must register with the DPC and comply with data protection requirements under the Data Protection Act, 2012 (Act 843).
- Good data protection practices help reduce the risk of data breaches and protect institutions' reputations.
- Individuals have the right to inquire about the collection, use, and storage of their personal information.
