The Data Protection Commission has disclosed that nearly GH¢10 million was lost to online fraud in Ghana during the first six months of 2026, warning institutions to strengthen their protection of personal information amid growing risks associated with artificial intelligence.

Executive Director of the Commission, Dr Arnold Kavaarpuo, said the Commission had intensified compliance monitoring and enforcement against institutions that violate Ghana’s data protection laws.

'They will be punished' - President Mahama warns online romance scammers

Speaking at a press briefing on October 12, 2026, he said the Commission had designated 2026 as its year of enforcement, with activities aimed at ensuring compliance with the Data Protection Act, 2012 (Act 843).

Dr Kavaarpuo said the reported fraud losses highlighted the dangers of personal information falling into the wrong hands, although not all the cases could be attributed to data protection breaches.

“Imagine receiving a telephone call from someone who knows your full name, where you work, your Ghana Card details, and even the bank you use. The person sounds convincing because they already know so much about you. They claim to be calling from your bank, persuading you to disclose one more detail, and shortly afterwards money disappears from your bank accounts.

“These are the kinds of risks we face when personal information falls into the wrong hands. The Cybersecurity Authority reported that nearly GH¢10 million was lost to online fraud in the first six months of 2026. Not all these losses can be attributed to data protection breaches, but they illustrate the wider risks associated with the misuse of personal information and the consequences that extend beyond financial fraud,” he noted.

According to Dr Kavaarpuo, individuals routinely provide sensitive information to banks, hospitals, employers, schools and digital service providers because they trust these institutions to handle it responsibly.

He warned that a breach of this trust could have serious consequences, including financial losses, harassment, discrimination and reputational damage.

He cited the improper disclosure of patients’ medical records and the misuse of personal information submitted for digital loans as examples of how individuals could be harmed when organisations fail to safeguard sensitive data.

The Commission’s executive director also raised concerns about the growing risks associated with artificial intelligence, which can be used to combine personal information, photographs and voice recordings to create convincing impersonations.

He said the technology was making the misuse of personal information more complex and creating opportunities for new forms of fraud.

“When personal information is mishandled, the consequences do not remain within an organisation’s computer systems. They affect real people, their families and their livelihoods,” he said.

Dr Kavaarpuo said the Data Protection Act, enacted in 2012, established responsibilities for organisations that collect, process, store and use personal information.

He also referenced Article 18(2) of Ghana’s 1992 Constitution, which guarantees the right to privacy of the home and other property, underscoring the importance of protecting individuals’ privacy.

He said the Commission’s intensified enforcement activities were intended to ensure that organisations complied with their legal obligations and handled personal information responsibly.

JKB/VPO

“Ghana Cannot Lower Its Guard” – Counter-Terrorism Chief Warns of Extremism Threats