26 FEB 2026 · Policy / Guidance

Ghana - National AI Strategy Cabinet Approval

Ghana's National AI Strategy secured Cabinet approval, advancing the country's framework for artificial intelligence governance and policy. The strategy was developed under Minister Samuel Armah with public launch forthcoming.

Secondary evidenceNational AI Strategy ·Cabinet ApprovalIssuing institution: Issuing authority not identified

26 JAN 2026 · Other

Ghana to introduce new regulations to tackle AI misinformation and disinformation

The Data Protection Commission (DPC) in partnership with the Ghana Association of Privacy Professionals (GAPP), on 26th January, 2026, officially launched the commencement of the celebration of the Data Protection Week 2026, in a press conference at the Information Services Department on the theme “Your Data, Your Identity: Building Trust in Ghana’s Digital Future”.

Secondary evidenceDeepfakes ·Data Privacy & Protection ·Generative AIIssuing institution: Issuing authority not identified

12 DEC 2025 · Law / Act

Cybersecurity requirement in Virtual Asset Service Providers Act, 2025

On 12 December 2025, Parliament adopted the Virtual Asset Service Providers Act, 2025, which includes a cybersecurity requirement, on third reading. The Act's date of entry into force will be announced. The Act will apply to virtual asset service providers providing such a service from or in Ghana. Virtual assets are defined as digital representations of value that can be digitally traded or used for payment, though excluding central bank digital currencies and representations of fiat currenc...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

27 NOV 2025 · Law / Act

Government access to data in Data Harmonisation Bill 2025

On 27 November 2025, the National Information Technology Agency closes the consultation on the Data Harmonisation Bill. The Bill seeks to establish a National Data Exchange Platform under government oversight, creating a legal framework for state-coordinated access to public interest data held by public institutions and certain private entities performing public or regulatory functions. The Bill would empower the designated Authority to mandate data classification, including open, shareable, ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 NOV 2025 · Law / Act

Data protection regulation in Electronic Communications Act, 2025

On 14 November 2025, the National Communications Authority closes its consultation on the Electronic Communications Act, 2025, which includes provisions for data protection regulation. Electronic communications and broadcasting service providers would be required to comply with the Data Protection Act, 2025 in their collection, processing, and storage of personal data. The National Communications Authority, in consultation with the Data Protection Commission, would be empowered to issue secto...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 NOV 2025 · Law / Act

National Communications Authority Act, 2025

On 14 November 2025, the National Communications Authority closes its consultation on the National Communications Authority Act. The Act would establish the National Communications Authority to regulate, promote, and develop communication services across the country. Its core functions would include overseeing radio frequency spectrum, ensuring the quality of communication services, and fostering fair competition among service providers. One aspect of its mandate would involve consumer protec...

Secondary evidenceConsumer ProtectionIssuing institution: Issuing authority not identified

14 NOV 2025 · Law / Act

Government access to data in Cybersecurity (Amendment) Bill

On 14 November 2025, the Cyber Security Authority closes the consultation on the Draft Cybersecurity (Amendment) Bill. The Bill expands the powers of the Cybersecurity Authority to investigate, prosecute, and manage cybercrime. The Authority is empowered to conduct criminal investigations and prosecute offences under the Act and the Electronic Transactions Act, and to seek confiscation of assets obtained through cybercrime, with civil recovery possible even if criminal proceedings fail. It ma...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 NOV 2025 · Law / Act

Content moderation regulation in Cybersecurity (Amendment) Bill

On 14 November 2025, the Cyber Security Authority closes the consultation on the Draft Cybersecurity (Amendment) Bill. The Bill broadens the scope of cybercrime provisions to cover other forms of online offences, including cyberbullying, online harassment, and cyberstalking. The Act criminalises the use of electronic media to threaten, harass, or manipulate children or adults, create false identities, track or monitor individuals without consent, or spread false information. Service providers...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

14 NOV 2025 · Law / Act

Expansion of Cyber Security Authority's powers in Cybersecurity (Amendment) Bill

On 14 November 2025, the Cyber Security Authority (CSA) closes the public consultation on the Draft Cybersecurity (Amendment) Bill. The Bill amends the Cybersecurity Act, 2020, to expand the role and functions of the CSA. It defines the CSA’s objectives as regulating cybersecurity activities, preventing and responding to threats, overseeing critical information infrastructure and cybersecurity professionals, combating cybercrime, facilitating the confiscation of cybercrime proceeds, fostering...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 NOV 2025 · Law / Act

Registration requirements in Cybersecurity (Amendment) Bill

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

31 OCT 2025 · Law / Act

Emerging Technologies Bill, 2025

On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes its consultation on the Emerging Technologies Bill, 2025. The Bill proposes to establish an Emerging Technologies Agency, which includes an Artificial Intelligence (AI) Division, with the objective of advancing the adoption of emerging technologies , including AI, blockchain-based technology, Internet of Things (IoT), cloud technology, and quantum computing promoting research and deploying these techn...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

31 OCT 2025 · Law / Act

Content moderation regulation in Electronic Transactions Act, 2025

On 31 October 2025, the National Information Technology Agency closes its consultation on the Electronic Transactions Act, 2025, which includes content moderation regulation. The Act would provide for the liability of intermediaries. Specifically, intermediaries acting as "mere conduit" or for the automatic, intermediate and temporary storage of electronic records on their systems for the purpose of more efficient onward transmission would be exempt from liability for transmitting electronic ...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

31 OCT 2025 · Law / Act

Fair marketing and advertising practice requirement in Electronic Transactions Act, 2025

On 31 October 2025, the National Information Technology Agency closes its consultation on the Electronic Transactions Act, 2025, which includes fair marketing and advertising practice requirements. The Act would prohibit the sending of unsolicited electronic communications to customers, while requiring those sending electronic communications to provide the option to unsubscribe from a mailing list and to identify the source of the customer's contact information upon request. Breaching the pro...

Secondary evidenceConsumer ProtectionIssuing institution: Issuing authority not identified

31 OCT 2025 · Law / Act

Operational license requirement in Data Protection Act, 2025

On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes its consultation on the Data Protection Act, 2025, including operational license requirements. The Act would require data protection service providers to obtain a license from the Data Protection Authority prior to operation. Data protection services cover activities designed to provide technical tools for personal data management, and explicitly exclude legal, compliance, and policy consultancy servi...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

31 OCT 2025 · Law / Act

Content moderation regulation in Misinformation, Disinformation, Hate Speech and Publication of Other Information (MDHI) Bill, 2025

On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes a consultation on the Misinformation, Disinformation, Hate Speech and Publication of Other Information (MDHI) Bill, 2025 including content moderation regulation. The Bill aims to prevent the publication, dissemination, and commercialisation of hate speech, misinformation, and disinformation, as well as regulate the public disclosure of private information, and establishes the conditions for liability ...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

21 OCT 2025 · Law / Act

Emerging Technologies Bill introduced

Primary source (moc.gov.gh) dated 21 October 2025 in GH. See linked source for full text.

Secondary evidenceData Privacy & Protection ·CybersecurityIssuing institution: Issuing authority not identified

05 FEB 2025 · National Strategy

National Digital Transformation and Emerging Technology Strategy

On 2 May 2025, Ghana’s Minister for Communication, Digital Technology, and Innovation announced the development of the National Digital Transformation and Emerging Technology Strategy, with a focus on Artificial Intelligence (AI). The strategy is intended to guide the ethical and secure deployment of AI and other digital tools for national development, ensuring inclusivity and appropriate governance frameworks. A component involves digitising essential national datasets to train AI systems on...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

05 FEB 2025 · National Strategy

Ghana releases national digital transformation and emerging tech strategy, covering AI

Primary source (moc.gov.gh) dated 2 May 2025 in GH. See linked source for full text.

Secondary evidenceData Privacy & Protection ·Cybersecurity ·Generative AIIssuing institution: Issuing authority not identified

28 OCT 2024 · National Strategy

Digital Economy Policy and Strategy 2024

On 28 October 2024, the Ministry of Communications and Digitalisation (MoCD) adopted a national digital economy policy and strategy outlining measures to drive inclusive growth through digital transformation. The framework prioritises universal access to connectivity and devices, digital skills development, efficient government service delivery via shared platforms like the Common National Digital Architecture (CNDA), and support for tech entrepreneurship. It establishes cross-sector strategi...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

18 OCT 2024 · Standard / Framework

CSA National Child Online Protection Framework

On 18 October 2024, the Cyber Security Authority (CSA) adopted the National Child Online Protection (COP) Framework. The framework is designed to address threats children face in the digital space, including cyberbullying, harassment, and online exploitation. It incorporates international standards such as the International Telecommunication Union (ITU) Guidelines and the WeProtect Global Alliance Model National Response, aiming to ensure a safer and more empowering online environment for chi...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

30 SEP 2024 · Working Paper

Ministry of Communications and Digitalisation Assessment on Ethical AI Readiness in Ghana

On 30 September 2024, the Ministry of Communications and Digitalisation (MoCD), through the Data Protection Commission (DPC) and in collaboration with UNESCO, launched the Readiness Assessment Measurement (RAM) for the Ethical Use of Artificial Intelligence (AI). This initiative focuses on bridging the digital divide and developing AI systems suited to Ghana's local needs, ensuring they contribute to national development and support human-centric decision-making.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

30 SEP 2024 · Working Paper

Ghana launches Readiness Assessment Measurement for ethical use of AI

Primary source (moc.gov.gh) dated 30 September 2024 in GH. See linked source for full text.

Secondary evidenceData Privacy & ProtectionIssuing institution: Issuing authority not identified

26 JUN 2024 · Executive Order

Minister for Communications and Digitalisation's policy requiring government external data to be stored locally in Ghana

On 26 June 2024, the Minister for Communications and Digitalisation announced government plans to relocate all external data hosted in other countries to local data centres in Ghana. This initiative aims to reduce operational costs associated with data storage, management, and retrieval on foreign cloud services. The policy is part of efforts to promote data localisation and encourage global cloud service providers to establish data centres within the country. A validation workshop on data ce...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 JAN 2024 · National Strategy

National Cybersecurity Policy and Strategy

On 1 October 2024, the Cyber Security Authority (CSA) of Ghana adopted a cybersecurity framework safeguarding the nation's digital ecosystem across all economic activities. The framework introduces legal, technical, organisational, and capacity-building measures to enhance cybersecurity. It operationalises Ghana's Computer Emergency Response Team (CERT) ecosystem, establishes a National Cybersecurity Risk Management Framework, and sets standards for Critical Information Infrastructure (CII) p...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

28 JUN 2023 · Standard / Framework

Council of Europe's Second Additional Protocol to the Convention on Cybercrime

On 28 June 2023, Ghana signed the Council of Europe’s Second Additional Protocol to the Convention on Cybercrime. As the second African country to join, Ghana aims to enhance cybercrime investigations and international cooperation. The Protocol provides authorities with tools for cross-border collaboration and electronic evidence sharing.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JUN 2023 · National Strategy

Ghana debates regulating AI

Lawmakers in Ghana are calling for legislation to govern the use of artificial intelligence. They argue that the tool could increase inequality and they want clarity over machine error.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 SEP 2021 · Executive Order

Notice of the Designation of Critical Information Infrastructure Pursuant to Subsection (2) of Section 35 of the Cybersecurity Act, 2020 (Act 1038)

On 22 September 2021, the Ministry of Communications and Digitalisation issued a notice on notice designating critical information infrastructure under the Cybersecurity Act 2020 (Act 1038). The identified critical providers include ICT, banking, energy, and health. The Minister for Communications and Digitalisation has designated specific computer systems and networks in these sectors as critical, with owners to be notified in writing.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

29 MAR 2021 · Law / Act

Licensing requirements in Cybersecurity Act 2020 (Act 1038)

On 29 March 2021, the obligation for cybersecurity service providers to obtain a licence under the Cybersecurity Act 2020 (Act 1038) entered into force. The Act outlines the licensing requirements for cybersecurity service providers. According to the Act, entities must obtain a license from the Authority to provide cybersecurity services. Failure to do so results in an administrative penalty. The application process involves submitting a written application with supporting documentation and a...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 JAN 2021 · Executive Order

CSA Directive for the Protection of Critical Information Infrastructure (CII)

On 1 October 2021, the Cyber Security Authority (CSA) adopted and implemented the Directive for the Protection of Critical Information Infrastructure, pursuant to the Cybersecurity Act 2020 (Act 1038). The Directive requires designated CII Owners to develop board-approved cybersecurity policies, appoint accountable officers, and implement technical and organizational measures, such as asset protection, access control, and employee training. Designated CII Owners are also mandated to conduct r...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

29 DEC 2020 · Law / Act

Content moderation regulation in Cybersecurity Act 2020 (Act 1038)

On 29 December 2020, the Cybersecurity Act 2020 (Act 1038) entered into force following its signing and publication in the official gazette. The Act specifies that owners or operators of computer online services, weblogs, internet services, or internet bulletin board services are prohibited from aiding or permitting the creation, production, publication, streaming, or possession of indecent images or photographs of children through their services. Additionally, they must ensure that their pla...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

29 DEC 2020 · Law / Act

Security measures for critical information infrastructure providers in Cybersecurity Act 2020 (Act 1038)

On 29 December 2020, the Cybersecurity Act 2020 (Act 1038) entered into force following its signing and publication in the official gazette. The Act outlines measures for the designation, registration, and management of critical information infrastructure (CII). The Minister, advised by the Authority, can designate computer systems or networks as CII if they are essential for national security, economic and social well-being, or public safety. Designated CII must be registered with the Autho...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

29 DEC 2020 · Law / Act

Measures establishing Cyber Security Authority in Cybersecurity Act 2020 (Act 1038)

On 29 December 2020, the Cybersecurity Act 2020 (Act 1038) entered into force following its signing and publication in the official gazette. The Act establishes the Cyber Security Authority as a corporate body. The Authority's powers include regulating cybersecurity activities, managing threats, overseeing critical information infrastructure, and fostering a secure digital ecosystem. Furthermore, the Authority has the power to monitor threats, set standards for cybersecurity products and serv...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

18 MAY 2020 · Policy / Guidance

Ministry of Finance Digital Financial Services Policy

On 18 May 2020, the Ministry of Finance adopted the Digital Financial Services Policy to guide collaboration with industry stakeholders in creating a digital financial ecosystem. The policy's measures include tiered Know Your Customer (KYC) processes, data-sharing frameworks, and interoperable payment systems. The policy supports innovation through regulatory sandboxes, open APIs, and tax incentives for digitising payments. It also emphasises infrastructure improvements, such as upgrades to ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified