Data protection act ghana

Find an Act

Section 1 — Establishment of Data Protection Commission

Section 2 — Object of the Commission

Section 3 — Functions of the Commission

Section 4 — Governing body of the Commission

Section 5 — Tenure of office of members

Section 6 — Meetings of the Board

Section 7 — Disclosure of interest

Section 8 — Establishment of committees

Section 9 — Allowances

Section 10 — Ministerial directives

Section 11 — Appointment of Executive Director

Section 12 — Functions of the Executive Director

Section 13 — Appointment of other staff

Section 14 — Funds of the Commission

Section 15 — Accounts and audit

Section 16 — Annual report and other reports

Section 17 — Privacy of the individual

Section 18 — Processing of personal data

Section 19 — Minimality

Section 20 — Consent, justification and objection

Section 21 — Collection of personal data

Section 22 — Collection of data for specific purpose

Section 23 — Data subject to be made aware of purpose of collection

Section 24 — Retention of records

Section 25 — Further processing to be compatible with purpose of collection

Section 26 — Quality of information

Section 27 — Registration of data controller

Section 28 — Security measures

Section 29 — Data processed by data processor or an authorized person

Section 30 — Data processor to comply with security measures

Section 31 — Notification of security compromises

Section 32 — Access to personal information

Section 33 — Correction of personal data

Section 34 — Manner of access

Section 35 — Right of access to personal data

Section 36 — Credit bureau as data controller

Section 37 — Processing of special personal data prohibited

Section 38 — Exemption related to religious or philosophical beliefs of data subject

Section 39 — Right to prevent processing of personal data

Section 40 — Right to prevent processing of personal data for direct marketing

Section 41 — Rights in relation to automated decision-taking

Section 42 — Rights in relation to exempt manual data

Section 43 — Compensation for failure to comply

Section 44 — Rectification, blocking, erasure and destruction of personal data

Section 45 — Application of the Act

Section 46 — Establishment of Data Protection Register

Section 47 — Application for registration

Section 48 — Right to refuse registration

Section 49 — Grant of registration

Section 50 — Renewal of registration

Section 51 — Application for registration

Section 52 — Cancellation of registration

Section 53 — Processing of personal data without registration prohibited

Section 54 — Access by the public

Section 55 — Duty to notify changes

Section 56 — Failure to register

Section 57 — Assessable processing

Section 58 — Appointment of data protection supervisors

Section 59 — Fees

Section 60 — National security

Section 61 — Crime and taxation

Section 62 — Health, education and social work

Section 63 — Regulatory activity

Section 64 — Journalism, literature and art

Section 65 — Research, history and statistics

Section 66 — Disclosure required by law or made in connection with a legal proceeding

Section 67 — Domestic purposes

Section 68 — Confidential references given by data controller

Section 69 — Armed Forces

Section 70 — Judicial appointments and honours

Section 71 — Public service or ministerial appointment

Section 72 — Examination marks

Section 73 — Examination scripts

Section 74 — Professional privilege

Section 75 — Enforcement notice

Section 76 — Cancellation of enforcement notice

Section 77 — Request for assessment

Section 78 — Determination by the Commission

Section 79 — Restriction on enforcement in case of processing for special purposes

Section 80 — Failure to comply with notice

Section 81 — Authorized officers