Ghana’s Data Protection Commission (DPC) will launch a targeted enforcement campaign in the coming weeks to address organizations mishandling user data, Executive Director Dr. Arnold Kavaarpuo announced at the MTN Business CTIO Roundtable Africa 2025.
The initiative aims to bolster compliance with the Data Protection Act 2012 (Act 843) while reinforcing public trust in the country’s growing digital economy.
Speaking at the industry event, Dr. Kavaarpuo stressed the need to balance corporate data usage with individual privacy rights. “Our work is not only about sensitization and enforcement it is about shaping a future where technology serves people and ignites progress,” he said. The campaign will identify non-compliant public and private entities, focusing on those collecting, storing, or processing personal data without proper safeguards.
The announcement follows heightened scrutiny of data practices after MTN Group’s recent cybersecurity breach, which exposed customer information in multiple markets, including Ghana. While MTN maintains its core systems were unaffected, the incident underscored vulnerabilities in data stewardship. The DPC, alongside the National Communications Authority and Cybersecurity Authority, continues to monitor the situation.
Dr. Kavaarpuo also revealed that Ghana’s Ministry of Communications has tasked the DPC with developing an open data framework to support emerging technologies like artificial intelligence. “Accessing data through APIs in universally compatible formats is critical for innovation,” he noted, signaling efforts to harmonize data accessibility with privacy protections.
Public education campaigns will accompany enforcement measures, urging citizens to verify whether institutions handling their data are DPC-registered a legal requirement under Act 843. The commission warned that unlicensed entities risk penalties, emphasizing that data privacy is a “fundamental right.”
Ghana’s push for stricter enforcement reflects broader African efforts to reconcile rapid digitalization with regulatory accountability. As mobile money platforms and AI-driven services expand, regulators face mounting pressure to curb breaches without stifling innovation.’
The DPC’s dual focus on punitive action and collaborative engagement highlights the delicate balance required to secure Africa’s digital ecosystems. With data now a cornerstone of economic growth, the commission’s campaign could set precedents for how emerging markets navigate the complexities of privacy, accountability, and technological advancement.
