Status
In force
Consent model
Opt-in
Primary law
Data Protection Act 2012 (Act 843)
Year
2012
Authority
Data Protection Commission
Marketing consent
Consent-first with registration duties; direct marketing carries opt-out rights.
Transfers
The controller stays accountable for personal data it sends overseas.
Penalties
Fines and imprisonment for violations; registration enforcement is the practical lever.
The framework
Ghana regulates personal data through the Data Protection Act 2012 (Act 843), supervised by the Data Protection Commission.
For advertisers the consent posture matters most, and Ghana sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Data Protection Act 2012 (Act 843)
2012 · In force
An early African adopter (2012) with an operating commission focused on controller registration and awareness; enforcement is steady and measured.
Marketing and advertising
Consent-first with registration duties; direct marketing carries opt-out rights. Most channel decisions here follow from that consent rule.
Cross-border transfers
The controller stays accountable for personal data it sends overseas.
Enforcement and penalties
Fines and imprisonment for violations; registration enforcement is the practical lever.
Primary sources
Cite this page: "Ghana Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/ghana.html. Accessed [date].