EY Ghana settles dispute with Cyber Security Authority over licensing fine

EY Ghana Cyber Security Authority cybersecurity licensing administrative penalty Cybersecurity Act 2020

Ghana’s Cyber Security Authority (CSA) has resolved a regulatory dispute with EY Ghana following the imposition of a GH¢360,000 administrative penalty. The fine was issued because EY Ghana provided regulated cybersecurity services, including work for owners of Critical Information Infrastructure (CII), without a valid Cybersecurity Service Provider (CSP) licence.

The CSA had previously issued multiple directives, including a notice on 20 March 2026, instructing the firm to apply for a licence within 15 days. The authority stated that the company failed to comply with three separate directives, leading to a penalty of GH¢120,000 for each instance of non-compliance under the Cybersecurity Act, 2020 (Act 1038).

In a joint statement, the CSA and EY Ghana announced that the matter has been settled after discussions regarding licence fees and administrative procedures. The organizations stated that the engagement clarified outstanding issues and that regulatory matters between the two parties have been “satisfactorily resolved.”

Entities

Cyber Security Authority · EY Ghana · Ghana

Sources

Ghana Cyber Security Authority Fines EY Ghana GH¢360,000 for Unlicensed Services [techafricanews.com]

25 days ago

EY Ghana and CSA settle cybersecurity licensing dispute after GH¢360,000 penalty [ghanaguardian.com]

24 days ago