DPC begins checks on data protection compliance

The Data Protection Commission (DPC) of Ghana will commence spot checks and enforcement actions against organizations beginning October 5 for failing to comply with data protection regulations under the Data Protection Act, 2012 (Act 843). Dr Arnold Kavaarpuo, the Commission's Executive Director, revealed that the organization had been educating the public on their rights and responsibilities under the law for the past year.

However, the DPC has now shifted its focus from awareness creation to enforcement. Dr Kavaarpuo stated that the Commission would target organizations that have not registered or met other legal requirements and take regulatory actions, which could include prosecution, if necessary. The spot checks will focus on registration, lawful processing, data protection, and other obligations outlined in the Act.

Organizations, especially those acting as data controllers, must register with the DPC before processing personal data. Dr Kavaarpuo urged organizations that have not yet registered or regularized their compliance status to do so before the spot checks commence, emphasizing the importance of "checking your status, regularizing your compliance, and protecting personal data."