Ghana's CSA fines ORC and Purpleline Solutions for cybersecurity breaches

The Cyber Security Authority (CSA) has imposed fines totaling GH¢360,000 on the Office of the Registrar of Companies (ORC) and Purpleline Solutions Limited for violating cybersecurity licensing regulations in Ghana.

The ORC was fined GH¢240,000 after failing to comply with directives to engage only Tier 1 licensed Cybersecurity Service Providers (CSPs) to protect its Critical Information Infrastructure (CII). Despite being instructed on June 15, 2026, to use licensed providers and submit specific documentation regarding its proposed Security Operations Centre (SOC), the ORC engaged Purpleline Solutions, which lacked the necessary authorization.

Purpleline Solutions Limited was fined GH¢120,000 for providing regulated cybersecurity services without a license. The CSA noted that while the company applied for a license on July 15, 2026, it had already begun providing services to the ORC prior to receiving approval. The Authority emphasized that a pending application does not grant legal authorization to operate as a regulated service provider.