Accra, Oct. 2, GNA – The Data Protection Commission (DPC) will from tomorrow Monday October 5 conduct spot checks and take enforcement action against organisations processing personal data without meeting statutory requirements.
The exercise will target organisations that have failed to register with the Commission or meet other requirements under the Data Protection Act, 2012 (Act 843).
Dr Arnold Kavaarpuo, Executive Director of the DPC, told the Ghana News Agency that the Commission had spent the past year educating organisations and individuals on their responsibilities and rights under the law.
He said the Commission had now shifted its focus from awareness creation to enforcement.
“We’ve gotten to the point where we believe that we’ve done enough awareness and then we need to step it up in terms of making sure that the public adheres to the mandates of the Commission,” he said.
The DPC launched the “Privacy is Personal” campaign in October 2025 to educate data controllers, data processors and data subjects on their responsibilities and rights.
Dr Kavaarpuo said organisations acting as data controllers were required to register with the Commission before processing personal data and renew their registration as required.
He said processing personal information without the required registration constituted an offence under the law.
The spot checks would assess registration, lawful processing, protection of personal data and other obligations under the Act.
Dr Kavaarpuo said the Commission had identified some non-compliant entities and would take regulatory and enforcement action, including prosecution where necessary.
He urged organisations yet to register or regularise their status to do so before the spot checks begin.
The Commission’s message is: “Check your status. Regularise your compliance. Protect personal data.”
GNA
Edited by Kenneth Sackey
4 Oct. 2026
Reporter: Albert Oppong-Ansah
Email: [email protected]
