By 
In the latest enforcement initiative by the Data Protection Commission, five additional organizations have been identified for non-compliance with the country’s data protection laws.
This enforcement campaign aims to address businesses that have not registered with the Data Protection Commission as data controllers but are engaged in processing personal data.
The Ghana Police Service supported the enforcement operation.
The companies that were approached during the operation are Care Flight Ghana, Embassy Court, Morning Star School, KABFAM, and Grace Homeopathic Clinic.
They were cited for violating Section 17 of the Data Protection Act 2012 (Act 843), which mandates all companies that handle personal data to obtain a license from the Data Protection Commission. Embassy Gardens, Morning Star School, CareFlight Ghana, and Grace Homeopathy were found in breach of this provision.
Embassy Gardens and Morning Star School were additionally cited for their failure to register with the commission.
While Kabfam had registered with the commission, it was cited for not appointing a certified data protection supervisor.
Quintin Akrobeto, the Director of Regulatory and Compliance at the Data Protection Commission, stressed the importance of businesses complying with the laws to avoid legal consequences.
“Registration is just one aspect of compliance. We expect institutions to bring their activities under the supervision of the commission,” he explained.
“For some of the companies, they have not registered at all, even after multiple follow-ups. For those that have registered, they are still not in compliance. Appointing a certified supervisor is necessary to guide companies toward compliance.”
This enforcement exercise is scheduled to take place monthly to ensure the strict enforcement of data protection laws.
Comments