The Data Protection Act, 2012 (Act 843) makes it an offence to process personal data without registering with the Data Protection Commission. Registration lasts two years. Check where you stand in two minutes, free. Then get the pack and register in one sitting.
Section 27: a data controller that intends to process personal data must register with the Commission.
Section 53: processing personal data without registration is prohibited. Section 56: doing so is an offence - on summary conviction, a fine of up to 250 penalty units, up to two years in prison, or both.
Section 50: registration must be renewed every two years.
Registration fees (Parliament-approved schedule): small GH¢120, medium GH¢900, large GH¢1,800. Class depends on turnover, staff numbers and specialist industries (petroleum, telecoms, banking, credit bureaus, insurance, mining).
Medium and large data controllers must appoint a designated Data Protection Supervisor; small ones are exempt but advised to get certified support.
The Commission now operates at dpc.gov.gh; the old dataprotection.org.gh address redirects there.
Check the current pages on dpc.gov.gh before you act; fees and steps can change.
The registration pack
The 11 answers the registration asks for, drafted in a worksheet before you open the portal - from certificate details to turnover, record volumes and countries processed in.
Fee-class worksheet: which of GH¢120 / GH¢900 / GH¢1,800 applies to you, and why.
Data map template (Excel): subjects, data types, purposes, locations, transfers outside Ghana.
Data Protection Supervisor decision sheet for medium and large controllers.
Post-registration compliance checklist from the Commission's own guidelines.
What it is not: a preparation pack, not legal advice, and it does not register you - registration is done with the Commission at dpc.gov.gh. For enforcement matters, speak to a Ghanaian lawyer.
$29
One-off. Instant download after payment. Word and Excel files.
Checkout by Polar, in US dollars. The Commission's own registration fee (GH¢120-1,800 by class) is paid separately to the DPC. If the file does not arrive, email fuseini.metadata@gmail.com with your receipt.
Questions
We are a small shop. Does this really apply to us? If you process personal data - a customer list, staff records, a WhatsApp order book with names and numbers - yes. The small-class fee is GH¢120; the offence for skipping registration is far worse.
Will this pack register us? No. It gets every answer and record ready so the actual registration on dpc.gov.gh takes one sitting, and keeps you compliant through renewal.
We registered years ago. Registrations expire after two years. The renewal tracker in the pack is built for exactly that.