Ghana DPA 2012 8 Data Protection Principles + lawful basis (Sec.17-24, Part Two). EIGHT PRINCIPLES: (1) ACCOUNTABILITY (Sec.17) - controller responsible for compliance; (2) LAWFULNESS OF PROCESSING (Sec.18) - lawful basis required including consent + contract + legal obligation + vital interests + public-interest + legitimate-interests; (3) SPECIFICATION OF PURPOSE (Sec.19) - specific + explicit + legitimate purpose; (4) COMPATIBILITY OF FURTHER PROCESSING (Sec.20) - compatible with original purpose only; (5) QUALITY OF DATA (Sec.21) - accurate + complete + up to date; (6) OPENNESS (Sec.22) - transparency notice + information about processing; (7) DATA SECURITY SAFEGUARDS (Sec.23) - appropriate technical + organisational measures; (8) DATA SUBJECT PARTICIPATION (Sec.24) - data subjects empowered to access + correct + control. CONSENT: must be freely given + specific + informed + verifiable; written-or-electronic acceptable; withdrawal allowed at any time; PARENTAL CONSENT required for processing personal data of children under 18 (Ghana DPA uses 18 not 16 used by GDPR). 2024-2025: amendments anticipated to strengthen consent + add granular controls + transparency notice templates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.