Ghana Data Protection Commission intensifies enforcement and reviews leaks

Ghana's Data Protection Commission (DPC) has launched a regulatory review following the public exposure of sensitive personal details belonging to 1,964 Ghanaian citizens evacuated from South Africa. The leaked records reportedly included full names, signatures, and documentation regarding financial assistance. The DPC cautioned media outlets and parliamentary groups, stating that the pursuit of public accountability does not justify the unrestricted disclosure of identifiable information that could lead to identity theft or harassment.

In a separate enforcement action, the DPC inspected a medical clinic and discovered it was storing sensitive patient records on an unvetted electronic system. The inspection revealed that the facility had failed to appoint a Data Protection Supervisor, had unpaid registration fees, and lacked adequate technical safeguards or privacy impact assessments. The clinic has been directed to provide a statement to the police as the Commission shifts toward direct enforcement against data handlers.