Does Ghana require consent to process data?

Consent is a key justification and must be informed and given without coercion, with extra protection for special personal data.

Who enforces Ghana's Data Protection Act?

The Data Protection Commission of Ghana supervises and enforces the Act and maintains the controller register.

Ghana

DPA GH

Data Protection Act 2012 (Act 843)

Ghana's Data Protection Act requires a lawful basis such as consent before processing personal data, with consent that is informed and given without coercion, and stronger protection for special personal data.

Region

Ghana

Status

In force since 2012

Group

Asia & Africa

Who must comply

Data controllers established in Ghana, and those abroad that use equipment in Ghana to process personal data, handling data of people in Ghana.

Penalties

Offenses carry fines expressed in penalty units and possible imprisonment, with administrative measures for non-registration.

Key obligations

Process only with consent or another lawful justification
Provide notice of purpose before collection
Apply stronger protection for special personal data
Honor access, correction and objection rights
Register with the commission as a data controller

How ConsentX helps

Informed, non-coerced opt-in consent capture

Notice of purpose in the banner

Stronger flows for special personal data

Rights request workflow with evidence

Region rule engine tuned for Ghana

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.

Get DPA GH ready with ConsentX

Get started free Book a demo

How to comply with DPA GH using ConsentX

1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under DPA GH.
2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that DPA GH requires, automatically.
3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a DPA GH audit.
5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.