GHANA DATA PROTECTION AND PRIVACY TRAINING PROVIDER ACCREDITATION TERMS AND CONDITIONS

GHANA DATA PROTECTION AND PRIVACY TRAINING PROVIDER ACCREDITATION

 TERMS AND CONDITIONS

This document details the Terms and Conditions that apply to Institutions accredited by the Data Protection Commission to deliver professional training consistent with the Ghana Data Protection Act 2012 (Act 843).

INSTITUTIONAL ELIGIBILITY

The Data Protection Commission of Ghana in line with Section 3(a) of the Data Protection Act 2012 Act 843 seeks to accredit Professional institutions to train Certified Data Protection Supervisors to implement appropriate, reasonable, technical, and organizational measures to remain compliant with Section 28 of the Act. Interested institutions must at least meet the minimum legal requirements as follows;

1. A registered Data Controller under the business registration laws of Ghana.
2. A valid registration certificate from the Data Protection Commission (Act 843 see Sec 46,3).
3. Appointed and trained a Certified Data Protection Supervisor (CDPS) according to DP Act (Act 843 see Sec.58)
4. Submitted at least one compliance report indicating the suitable compliance status of the institution to the principles of the DP Act (Act 843).
5. Possess five (5) years’ minimum work experience in a related field such as IT, HR Legal Audit, Risk Management and Compliance, Data Governance etc.
6. Train at least two Ghana DP Act 843 Certified Data Protection Supervisor with requisite experience (i.e. undertake and pass the Train the Trainer Course by the Commission at a fee), to become Data Protection Practitioners for delivery of the training.
   1. Nominated CDPS’s must possess a minimum of three (3) years of professional experience in Data Protection, Compliance, Data Governance, or a closely related field.
7. Demonstrate ability to develop and/or assist Data Controllers to draft Data Protection Impact Assessment of projects they are implementing or intend to.
8. Demonstrate ability to developing a Data Protection Compliance Schedule for institutions.
9. Possess demonstrable knowledge in international treaties/conventions and regulations on Data Protection.
10. Willing to go through an application process and agree to the Data Protection Commission’s terms and conditions.

We look forward to the expressions of interest in three copies (1 original, 2 copies) and must be delivered to the Reception of the Commission.

APPLICATION PROCESS

 An application for accreditation to provide services in the field of Data Protection and Privacy must demonstrate compliance and capability as determined by the Commission. Applicants must complete the following steps:

1. Respond to the Call for Expression of Interest (EoI)
2. Complete the accreditation Criteria Form
3. Complete the Application Form
4. Receive initial Commission determination for Application
5. Assessment of Trainers
6. Agree to a site visit / Inspection of training facility by the DPC
7. Receive Final Decision
8. Sign Accreditation Agreement
9. Orientation                   

Interested institutions should send their EoI to the Commission only via the mail provided below;

EoI should be submitted not later than 4:00pm on Friday, 28^th August 2026 to the email address below;

For further clarifications, applicants should reach the Commission at the address below on Mondays to Fridays inclusive except on public holidays or via the mobile lines provided below;

Address for submission of EoI, clarifications and any other official correspondence

THE EXECUTIVE DIRECTOR,

DATA PROTECTION COMMISSION,

1. O. BOX CT 7195,

INFORMATION SERVICE DEPARTMENT,

ADABRAKA, ACCRA.

DIGITAL ADDRESS GR-076-7833.

CONTACT:​ +233256226922; +233256301533

Email for submission of EoI: accreditation@dataprotection.org.gh