Ghana
Tier 3 Comprehensive law AfricaPrincipal framework: Data Protection Act 843 (2012). Regulator: Data Protection Commission. Act 843 (2012) follows the older registration model; the Commission runs periodic registration-compliance sweeps.
At a glance
- Principal law
- Data Protection Act, 2012 (Act 843)
- Regulator
- Data Protection Commission
- Breach notification
- Notify the Commission and affected subjects; no fixed statutory deadline
- Maximum penalty
- Penalty-unit fines and imprisonment for offences
- DPO required
- Data protection supervisor required; controllers register with the Commission
- Digital consent age
- Parental consent for children
- Extraterritorial reach
- Processing in Ghana or using equipment there
Structure
- Structural pattern
- Not assessed
- Sub-jurisdictions
- None — no sub-national axis
- ISO code
- GH
A Pattern 4 jurisdiction has no sub-national layer to model. Devolution elsewhere in the legal system does not imply it here — check each Act rather than reasoning from the country.
Transfers and adequacy
- EU member
- No
- EEA member
- No
Instruments
No instrument profiled yet.
Sources
- Regulator Data Protection Commission
- Primary Data Protection Act, 2012 (Act 843) no verified URL yet
Link returned 404 on 2026-07-26 and was removed. Find the current address before citing.
Never independently verified — seeded from the prototype.