Have a Concern or Comment?
Report here & click on the relevant links below.
About the Commission
The Data Protection Commission (DPC) is an independent statutory body established under the Data Protection Act, 2012 (Act 843) to protect the privacy of the individuals and personal data by regulating the processing of personal information. The Commission provides for the process to obtain, hold, use or disclose personal information and for other related issues bordering on the protection of personal data.
What We Do
Our focus is on delivering you the absolute best support, guiding you through training and providing forward-thinking industry solutions.
Fees and Charges
Clear and transparent service fees for registration, training, audits, and certifications. The Data Protection Commission provides a range of services to individuals, institutions, and organisations in Ghana. Our fees are structured according to the size and type of entity, and align with national compliance regulations under the Data Protection Act, 2012 (Act 843). From registrations and renewals to audits and training programmes, access a full breakdown of our approved charges across all Commission services.
Our Data Protection Principles
These guiding standards ensure that all personal data is collected, used, and stored lawfully, fairly, and securely.
1. Accountability
Demonstration of legal compliance with easily accessible documentary evidence.
2. Lawfulness of Processing
Providing evidence of legitimate grounds, fairness and transparency.
3. Specification of Purpose
Proactively obtaining customer consent for changed or new purposes.
4. Quality of Information (section 26)
Ensuring that data held is continuously accurate, available and up-to-date.
5. Purpose of Collection
Processing personal data for clearly specified purposes only.
6. Openness
Keeping Data Subjects fully informed about their personal data via multiple channels.
7. Data Security Safeguards
Use of appropriate technology and organisational measures.
8. Data Subject Participation
Empowering Data Subjects to exercise their legal rights.
