The Data Protection Commission (DPC) and the Criminal Investigations Department (CID) of the Ghana Police Service have taken action against managers of renowned companies. Three managers from Hisense, an electronics retailer, Marwako Fast Foods, and Agyabeng Akrasi and Co Limited, a law firm, were apprehended on Monday for allegedly violating the Data Protection Act, 2012 (Act 843).
Furthermore, Quick Credit and Investment Micro-Credit found themselves in legal trouble for allegedly issuing threats, harassing customers, and exposing defaulting clients’ identities, contravening the Act. In response, the CID has summoned representatives from Quick Credit and Investment Micro-Credit, as well as Bemuah Royal Hospital, for further questioning regarding potential breaches of data protection laws.
The crackdown, led by the Enforcement Unit of the DPC, aims to ensure compliance with the Data Protection Act, 2012 (Act 843), which safeguards personal data and privacy by regulating data processing. These measures require data controllers to register with the Data Protection Commission and renew their registration biennially.
During a post-operation briefing, Mr. Quintin Akroboto, Director of Regulatory and Compliance for the DPC, revealed that despite multiple attempts at engagement and communication, the companies in question failed to comply with the Act’s provisions. He emphasized that these companies would be subject to legal proceedings and potential penalties, as stipulated by law.
The Director also confirmed that the Attorney General’s office is informed about the situation and that the offending companies will face legal consequences, possibly including fines or imprisonment.
Ms. Patricia Adusei-Poku, Executive Director of the DPC, highlighted that the Commission is actively monitoring around 250 companies for various data protection breaches. She underscored the Commission’s commitment to ensuring that all data controllers adhere to the law, urging non-compliant institutions to take corrective action.
In light of these developments, companies are strongly encouraged to register with the DPC to avoid potential reputational damage and financial losses resulting from compensations, fines, sanctions, and legal repercussions.
