Data Protection Commission Ghana

Data Protection Commission · Ghana

Guidance

Official notes, FAQs, and practical explanations to help organisations register and stay compliant under Act 843.

Published notes

Guidance from the Commission

Materials appear here when the Commission marks them for public release.

Published guidance · Incidents

How to file a 72-hour breach notification

Notify the Commission without delay and, where feasible, within 72 hours of becoming aware of the breach.

Precedent determination · Enforcement

Precedent: failure to notify a material breach

Where a controller fails to notify a material personal data breach, the Commission may issue an enforcement notice requiring remediation and evidence of data-subject notification.