Ghana DPA 2012 Data Subject Rights (Sec.30-38). RIGHTS: (1) RIGHT TO INFORMATION (Sec.30) - clear privacy notice + collection-time information; (2) RIGHT OF ACCESS (Sec.32) - confirmation + copy of personal data + processing purposes + categories + recipients + retention + rights information; controller must respond within 40 DAYS (or shorter where required); (3) RIGHT TO RECTIFICATION (Sec.33) - correction of inaccurate or incomplete data; (4) RIGHT TO ERASURE (Sec.36) - deletion when data unlawful + obsolete + withdrawal of consent + objection sustained; (5) RIGHT TO OBJECT (Sec.34) - processing based on legitimate interests + direct marketing (absolute right) + research; (6) RIGHT TO DATA PORTABILITY (Sec.38, 2017 amendment) - structured + commonly used + machine-readable format + transmit to another controller; (7) AUTOMATED DECISION-MAKING (Sec.37, 2017 amendment) - protection from solely automated decisions producing legal or similar effects + human review + meaningful information. APPEALS: data subject may complain to DPC + DPC may investigate + issue determinations + appeal to High Court. 2024-2025 amendments anticipated to: align response timeline closer to GDPR 30 days + strengthen ADM + portability + appeals.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.