By Samira Larbie, GNA
Accra, Oct. 7, GNA – The Data Protection Commission (DPC) has urged institutions to strengthen safeguards for personal data amid increasing digitisation and growing volumes of information collected.
The Commission said effective data protection was essential to safeguarding individuals’ privacy and rights while reducing the risks associated with unauthorised access and data breaches.
Ms Hilda Odua Sowah, Accreditation and Compliance Manager at the DPC, made the call at a data protection awareness session in Accra on Tuesday.
It was organised by the Information Services Department (ISD), in collaboration with the Ghana News Agency (GNA) and the DPC, for staff of the two institutions as part of Customer Service Week.
Ms Sowah said data protection involved the lawful, fair and secure processing of personal data while protecting the rights and freedoms of individuals.
She said personal data included information that could identify an individual, such as names, ages, addresses and other identifying details.
Ms Sowah cautioned staff and institutions against leaving personal information exposed on desks, attendance books, computers and other places where unauthorised persons could access it.
“Once you collect personal information from individuals, you have a responsibility to protect the personal data that you have collected,” she said.
Ms Sowah said good data protection practices helped institutions reduce the risk of data breaches, comply with legal requirements and protect their reputation.
She noted that under the Data Protection Act, 2012 (Act 843), institutions processing personal data were required to register with the DPC and comply with applicable data protection requirements.
Ms Sowah encouraged members of the public to become “data protection ambassadors” by asking institutions why their personal information was being collected, how it would be used and where it would be kept.
She said individuals had rights including the right to be informed, object to certain processing, prevent direct marketing, complain and have inaccurate personal information amended.
Ms Sowah urged individuals dissatisfied with how their personal data was handled to first complain to the relevant data controller and, where the matter was not resolved, report it to the DPC.
Ms Keren Aryee, Compliance Officer at the DPC, said compliance offered institutions several benefits, including avoiding penalties, improving customer confidence, strengthening security and enhancing governance.
She said institutions should train staff, conduct targeted awareness programmes and implement appropriate security controls to protect personal information.
Ms Aryee also urged organisations introducing new technologies or software involving personal data to conduct Data Protection Impact Assessments (DPIAs) to identify potential risks and establish appropriate measures to mitigate them.
She said institutions should maintain records of processing activities and have clear policies governing the retention, storage, transfer and deletion of personal data.
Ms Aryee further cautioned institutions against photocopying Ghana Cards unnecessarily, noting that the cards contained information that uniquely identified individuals.
She said organisations should instead use appropriate verification mechanisms provided by the National Identification Authority where necessary.
The awareness programme formed part of efforts by the ISD and GNA to strengthen staff capacity in data protection and customer service and promote privacy, accountability and trust in information handling.
GNA
Edited by Kenneth Sackey
7 Oct. 2026
Reporter: Samira Larbie