By Stanley Senya
Accra, Oct. 30, GNA – The Ghana Association of Privacy Professionals (GAPP) has expressed concern over reports that the health data of Ghanaians collected through systems managed under the Ministry of Health (MoH) and the Ghana Health Service (GHS) may currently be under the effective control of a private company.
In a statement issued in Accra on Thursday, GAPP warned that if verified, such an arrangement could raise significant legal, ethical, and sovereignty concerns, given that health data constituted sensitive personal information protected under Ghana’s Data Protection Act, 2012 (Act 843).
“Health data must be processed strictly in line with the law, reaffirming that the Government of Ghana, through the MoH and GHS remained the rightful data controller for all national health information systems,” the Association emphasized.
According to GAPP, any situation in which a private entity is granted operational or decision-making control over citizens’ health data without a clear legal mandate or government oversight undermines both data sovereignty and public trust.
The Association urged the Ministry of Health and the Ghana Health Service to provide an official clarification on the ownership, governance, and management of Ghana’s health data systems.
It also called on the Data Protection Commission (DPC) to launch an immediate inquiry into the matter to determine whether the processing of personal health information complies fully with Ghana’s data protection laws and international best practices.
“Any arrangement that grants control over citizens’ health data to a third party without oversight or safeguards raises serious compliance concerns,” GAPP cautioned.
To ensure transparency and legal adherence, GAPP recommended that the MoH and GHS, conduct comprehensive Data Protection Impact Assessment (DPIA) on all national health information systems, review all data processing agreements currently in effect to ensure alignment with Act 843.
They should also ensure that all national health data are stored securely within Ghana’s jurisdiction, backed by robust access controls and accountability mechanisms to protect data sovereignty.
The Association said these measures were necessary to uphold the integrity of Ghana’s health information infrastructure and prevent unauthorized access or misuse of citizens’ sensitive data.
GAPP reiterated its readiness to collaborate with the Data Protection Commission, Ministry of Health, and other stakeholders to strengthen data protection practices across the health sector.
“Ultimately, Ghanaians’ health data belong to the people, and its stewardship must reflect the highest standards of transparency, accountability, and respect for privacy,” the Association stressed.
The statement comes amid growing public debate about the digitalization of Ghana’s health records and concerns over who controls, stores, and accesses citizens’ medical information.
As the use of digital health platforms expands, GAPP’s intervention adds to calls for the government to prioritize data sovereignty and enforce compliance with national privacy laws to protect the public’s trust in health data systems.
GNA
Christian Akorlie