Nyaho Medical Centre has been directed to report to the Criminal Investigations Department (CID) of the Ghana Police Service to provide a statement over the expiry of its data protection certificate.
The directive follows an enforcement operation by the Data Protection Commission (DPC) on Monday, October 12, 2026, as part of efforts to ensure organisations comply with the country’s data protection laws.
The Accra-based healthcare facility has been flagged by the Commission over the expired certificate, with investigations expected to establish the circumstances surrounding the lapse and determine whether the facility has met its regulatory obligations.
Healthcare institutions handle sensitive personal information, including patients’ medical histories, diagnoses, contact details and treatment records. Maintaining appropriate data protection measures is therefore essential to safeguarding patient privacy.
The DPC is mandated to monitor compliance with Ghana’s data protection framework, which outlines the requirements for organisations that collect and process personal information.
Under the Data Protection Act, 2012 (Act 843), organisations processing personal data are required to meet the relevant registration and data protection obligations.
However, details regarding the circumstances surrounding the expiry of Nyaho Medical Centre’s certificate, including how long it has remained expired, have not been disclosed.
READ ALSO:
