Ghana

Data protection regulation in Electronic Communications Act, 2025

On 14 November 2025, the National Communications Authority closes its consultation on the Electronic Communications Act, 2025, which includes provisions for data protection regulation. Electronic communications and broadcasting service providers would be required to comply with the Data Protection Act, 2025 in their collection, processing, and storage of personal data. The National Communications Authority, in consultation with the Data Protection Commission, would be empowered to issue secto...

Consumer Protectionmoc.gov.gh ↗

National Communications Authority Act, 2025

On 14 November 2025, the National Communications Authority closes its consultation on the National Communications Authority Act. The Act would establish the National Communications Authority to regulate, promote, and develop communication services across the country. Its core functions would include overseeing radio frequency spectrum, ensuring the quality of communication services, and fostering fair competition among service providers. One aspect of its mandate would involve consumer protec...

National Strategycsa.gov.gh ↗

Government access to data in Cybersecurity (Amendment) Bill

On 14 November 2025, the Cyber Security Authority closes the consultation on the Draft Cybersecurity (Amendment) Bill. The Bill expands the powers of the Cybersecurity Authority to investigate, prosecute, and manage cybercrime. The Authority is empowered to conduct criminal investigations and prosecute offences under the Act and the Electronic Transactions Act, and to seek confiscation of assets obtained through cybercrime, with civil recovery possible even if criminal proceedings fail. It ma...

Content Moderationcsa.gov.gh ↗

Content moderation regulation in Cybersecurity (Amendment) Bill

On 14 November 2025, the Cyber Security Authority closes the consultation on the Draft Cybersecurity (Amendment) Bill. The Bill broadens the scope of cybercrime provisions to cover other forms of online offences, including cyberbullying, online harassment, and cyberstalking. The Act criminalises the use of electronic media to threaten, harass, or manipulate children or adults, create false identities, track or monitor individuals without consent, or spread false information. Service providers...

National Strategycsa.gov.gh ↗

Expansion of Cyber Security Authority's powers in Cybersecurity (Amendment) Bill

On 14 November 2025, the Cyber Security Authority (CSA) closes the public consultation on the Draft Cybersecurity (Amendment) Bill. The Bill amends the Cybersecurity Act, 2020, to expand the role and functions of the CSA. It defines the CSA’s objectives as regulating cybersecurity activities, preventing and responding to threats, overseeing critical information infrastructure and cybersecurity professionals, combating cybercrime, facilitating the confiscation of cybercrime proceeds, fostering...

National Strategycsa.gov.gh ↗

Registration requirements in Cybersecurity (Amendment) Bill

Emerging Technologies Bill, 2025

On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes its consultation on the Emerging Technologies Bill, 2025. The Bill proposes to establish an Emerging Technologies Agency, which includes an Artificial Intelligence (AI) Division, with the objective of advancing the adoption of emerging technologies , including AI, blockchain-based technology, Internet of Things (IoT), cloud technology, and quantum computing promoting research and deploying these techn...

Content Moderationmoc.gov.gh ↗

Content moderation regulation in Electronic Transactions Act, 2025

On 31 October 2025, the National Information Technology Agency closes its consultation on the Electronic Transactions Act, 2025, which includes content moderation regulation. The Act would provide for the liability of intermediaries. Specifically, intermediaries acting as "mere conduit" or for the automatic, intermediate and temporary storage of electronic records on their systems for the purpose of more efficient onward transmission would be exempt from liability for transmitting electronic ...

Consumer Protectionmoc.gov.gh ↗

Fair marketing and advertising practice requirement in Electronic Transactions Act, 2025

On 31 October 2025, the National Information Technology Agency closes its consultation on the Electronic Transactions Act, 2025, which includes fair marketing and advertising practice requirements. The Act would prohibit the sending of unsolicited electronic communications to customers, while requiring those sending electronic communications to provide the option to unsubscribe from a mailing list and to identify the source of the customer's contact information upon request. Breaching the pro...

Operational license requirement in Data Protection Act, 2025

On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes its consultation on the Data Protection Act, 2025, including operational license requirements. The Act would require data protection service providers to obtain a license from the Data Protection Authority prior to operation. Data protection services cover activities designed to provide technical tools for personal data management, and explicitly exclude legal, compliance, and policy consultancy servi...

Content Moderationmoc.gov.gh ↗

Content moderation regulation in Misinformation, Disinformation, Hate Speech and Publication of Other Information (MDHI) Bill, 2025

On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes a consultation on the Misinformation, Disinformation, Hate Speech and Publication of Other Information (MDHI) Bill, 2025 including content moderation regulation. The Bill aims to prevent the publication, dissemination, and commercialisation of hate speech, misinformation, and disinformation, as well as regulate the public disclosure of private information, and establishes the conditions for liability ...

21 OCT 2025 · Law / Act

Emerging Technologies Bill introduced

Primary source (moc.gov.gh) dated 21 October 2025 in GH. See linked source for full text.

✓ ✓ OfficialData Privacy & Protection ·Cybersecuritymoc.gov.gh ↗

02 MAY 2025 · National Strategy

Ghana releases national digital transformation and emerging tech strategy, covering AI

Primary source (moc.gov.gh) dated 2 May 2025 in GH. See linked source for full text.

✓ ✓ OfficialData Privacy & Protection ·Cybersecurity ·Generative AImoc.gov.gh ↗

05 FEB 2025 · Other

National Digital Transformation and Emerging Technology Strategy

On 2 May 2025, Ghana’s Minister for Communication, Digital Technology, and Innovation announced the development of the National Digital Transformation and Emerging Technology Strategy, with a focus on Artificial Intelligence (AI). The strategy is intended to guide the ethical and secure deployment of AI and other digital tools for national development, ensuring inclusivity and appropriate governance frameworks. A component involves digitising essential national datasets to train AI systems on...

✓ ✓ OfficialNational Strategynita.gov.gh ↗

28 OCT 2024 · Other

Digital Economy Policy and Strategy 2024

On 28 October 2024, the Ministry of Communications and Digitalisation (MoCD) adopted a national digital economy policy and strategy outlining measures to drive inclusive growth through digital transformation. The framework prioritises universal access to connectivity and devices, digital skills development, efficient government service delivery via shared platforms like the Common National Digital Architecture (CNDA), and support for tech entrepreneurship. It establishes cross-sector strategi...

18 OCT 2024 · Other

CSA National Child Online Protection Framework

On 18 October 2024, the Cyber Security Authority (CSA) adopted the National Child Online Protection (COP) Framework. The framework is designed to address threats children face in the digital space, including cyberbullying, harassment, and online exploitation. It incorporates international standards such as the International Telecommunication Union (ITU) Guidelines and the WeProtect Global Alliance Model National Response, aiming to ensure a safer and more empowering online environment for chi...

30 SEP 2024 · Other

Ministry of Communications and Digitalisation Assessment on Ethical AI Readiness in Ghana

On 30 September 2024, the Ministry of Communications and Digitalisation (MoCD), through the Data Protection Commission (DPC) and in collaboration with UNESCO, launched the Readiness Assessment Measurement (RAM) for the Ethical Use of Artificial Intelligence (AI). This initiative focuses on bridging the digital divide and developing AI systems suited to Ghana's local needs, ensuring they contribute to national development and support human-centric decision-making.

30 SEP 2024 · Working Paper

Ghana launches Readiness Assessment Measurement for ethical use of AI

Primary source (moc.gov.gh) dated 30 September 2024 in GH. See linked source for full text.

✓ ✓ OfficialData Privacy & Protectionmoc.gov.gh ↗

26 JUN 2024 · Executive Order

Minister for Communications and Digitalisation's policy requiring government external data to be stored locally in Ghana

On 26 June 2024, the Minister for Communications and Digitalisation announced government plans to relocate all external data hosted in other countries to local data centres in Ghana. This initiative aims to reduce operational costs associated with data storage, management, and retrieval on foreign cloud services. The policy is part of efforts to promote data localisation and encourage global cloud service providers to establish data centres within the country. A validation workshop on data ce...

10 JAN 2024 · Other

National Cybersecurity Policy and Strategy

On 1 October 2024, the Cyber Security Authority (CSA) of Ghana adopted a cybersecurity framework safeguarding the nation's digital ecosystem across all economic activities. The framework introduces legal, technical, organisational, and capacity-building measures to enhance cybersecurity. It operationalises Ghana's Computer Emergency Response Team (CERT) ecosystem, establishes a National Cybersecurity Risk Management Framework, and sets standards for Critical Information Infrastructure (CII) p...

28 JUN 2023 · Other

Council of Europe's Second Additional Protocol to the Convention on Cybercrime

On 28 June 2023, Ghana signed the Council of Europe’s Second Additional Protocol to the Convention on Cybercrime. As the second African country to join, Ghana aims to enhance cybercrime investigations and international cooperation. The Protocol provides authorities with tools for cross-border collaboration and electronic evidence sharing.

26 JUN 2023 · National Strategy

Ghana debates regulating AI

Lawmakers in Ghana are calling for legislation to govern the use of artificial intelligence. They argue that the tool could increase inequality and they want clarity over machine error.

National Strategydw.com ↗

22 SEP 2021 · Executive Order

Notice of the Designation of Critical Information Infrastructure Pursuant to Subsection (2) of Section 35 of the Cybersecurity Act, 2020 (Act 1038)

On 22 September 2021, the Ministry of Communications and Digitalisation issued a notice on notice designating critical information infrastructure under the Cybersecurity Act 2020 (Act 1038). The identified critical providers include ICT, banking, energy, and health. The Minister for Communications and Digitalisation has designated specific computer systems and networks in these sectors as critical, with owners to be notified in writing.

✓ ✓ OfficialNational Strategyarchive.gazettes.africa ↗

29 MAR 2021 · Law / Act

Licensing requirements in Cybersecurity Act 2020 (Act 1038)

On 29 March 2021, the obligation for cybersecurity service providers to obtain a licence under the Cybersecurity Act 2020 (Act 1038) entered into force. The Act outlines the licensing requirements for cybersecurity service providers. According to the Act, entities must obtain a license from the Authority to provide cybersecurity services. Failure to do so results in an administrative penalty. The application process involves submitting a written application with supporting documentation and a...

✓ ✓ OfficialNational Strategycsdsafrica.org ↗

10 JAN 2021 · Executive Order

CSA Directive for the Protection of Critical Information Infrastructure (CII)

On 1 October 2021, the Cyber Security Authority (CSA) adopted and implemented the Directive for the Protection of Critical Information Infrastructure, pursuant to the Cybersecurity Act 2020 (Act 1038). The Directive requires designated CII Owners to develop board-approved cybersecurity policies, appoint accountable officers, and implement technical and organizational measures, such as asset protection, access control, and employee training. Designated CII Owners are also mandated to conduct r...