Skip to main content
NOPE
In Effect Law Data Protection

Ghana DPA

Data Protection Act 2012 (Act 843)

Ghana's comprehensive data protection law establishing data subject rights including right to prevent automated decision-making and requiring breach notification.

Jurisdiction

Ghana

Enacted

May 16, 2012

Effective

Oct 16, 2012

Enforcement

Data Protection Commission (Ghana)

Cyrilla legal database — Ghana Data Protection Act 2012 (Act 843) full text. Ghana's own hosts (nita.gov.gh, dataprotection.org.gh, ghalii.org) do not answer from European IPs.

Why It Matters

Ghana's Section 41 automated decision-making rights apply directly to AI chatbots making risk assessments or providing recommendations.

At a Glance

Applies to

AI CompanionMental Health AppGeneral Chatbot

Who Must Comply

  • Data controllers and processors in Ghana
  • Entities processing personal data of Ghanaian residents
  • Automated systems processing personal data

Obligations fall on:

Safety Provisions

  • Right to prevent processing for automated decision-making (Section 41)
  • Breach notification required
  • Data controller registration with Data Protection Commission
  • Security safeguards for personal data
  • Sensitive data requires explicit consent

Compliance & Enforcement

Penalties

GHS 25K; criminal (up to 3yr)

Criminal liability

View on map

Ghana

Focus Areas

Mental health & crisis
Algorithmic accountability

Cite This

APA

Ghana. (2012). Data Protection Act 2012 (Act 843).

Related Regulations

In Effect ZM

Zambia DPA

Zambia's comprehensive data protection law with special protections for vulnerable persons and DPIA requirements for high-risk processing.

In Effect BW

Botswana DPA

Botswana's modernized data protection law requiring Data Protection Impact Assessment and establishing age 16 for consent.

In Effect SC

Seychelles DPA

Seychelles' modern data protection law requiring DPO for large-scale processing and recognizing Cross-Border Privacy Rules certification.

In Effect RW

Rwanda AI Policy

First African country to adopt comprehensive national AI policy. Establishes Responsible AI Office (RAIO) under MINICT. Implements RURA ethical guidelines covering beneficence, non-maleficence, autonomy, justice, explicability, transparency. Non-binding framework.

Proposed KE

Kenya AI Bill

First comprehensive AI bill in Sub-Saharan Africa. Proposes creation of AI Commissioner, AI Authority, and Advisory Committee. Establishes risk-based regulatory model aligned with EU AI Act framework, criminalizes harmful deepfakes, and mandates AI content labeling.

Enacted US-CA

CA SB 1276

Amends California's sexual-exploitation-of-a-child offence (Penal Code Section 311.3) so that it covers digitally altered or artificial-intelligence-generated matter depicting a person under 18 engaged in sexual conduct, and adds knowingly downloading, streaming or accessing such matter through electronic or digital media to the prohibited conduct. It makes the same extension to the definition of sexual exploitation that triggers mandated reporting under the Child Abuse and Neglect Reporting Act (Section 11165.1).

All regulations See what's likely relevant to your deployment

Last updated September 12, 2026. Verify against primary sources before relying on this information.