••
The Data Protection Commission (DPC) has identified and flagged six companies operating in the Kaneshie North Industrial Area and Tudu for significant breaches of Ghana’s data protection laws. During a recent enforcement exercise, the commission discovered that these entities, which include prominent names such as Polytex Ghana Limited and the Melcom Group of Companies, were either operating without mandatory registration or had failed to renew their expired data protection certificates. This move forms part of the commission's intensified efforts to ensure that all data controllers in the country adhere to the legal requirements governing the handling of personal information.
The affected companies have been formally instructed to report to the Cyber Security Unit of the Criminal Investigation Department (CID) by October 15 to address their status. This referral to the police unit indicates a shift in the commission's strategy from advocacy to strict enforcement of the Data Protection Act, 2012 (Act 843). According to the DPC, the flagged firms must rectify their compliance failures immediately to avoid further legal consequences, which could include formal prosecution or more severe administrative sanctions.
The commission has reiterated that ignorance of the law will not be accepted as a valid excuse for non-compliance. By targeting high-traffic business hubs like Tudu and the Kaneshie North Industrial Area, the DPC aims to send a clear message to the private sector about the legal importance of protecting consumer data. This enforcement exercise is expected to continue across various commercial sectors to ensure that every organization processing personal data in Ghana is fully registered and operating within the bounds of national law.