Ghana DPA 2012 Part Four - Registration + Controller/Processor Obligations. REGISTRATION (Sec.41-46): all data controllers + processors processing personal data in Ghana must REGISTER with DPC + complete REGISTRATION APPLICATION (Sec.42) including organizational details + categories of data + purposes + cross-border transfers + safeguards; the DPC may approve + reject + impose conditions; REGISTRATION FEE annual + scaled to organization size; REGISTRATION CERTIFICATE issued (Sec.43) + valid 2 years + renewable; PUBLIC REGISTER maintained by DPC accessible online. CONTROLLER OBLIGATIONS: lawful processing + 8 principles compliance + data subject rights enablement + security safeguards (technical + organisational) + breach notification + records of processing + cross-border transfer compliance + cooperation with DPC. PROCESSOR OBLIGATIONS: written contract with controller specifying scope + purposes + safeguards + sub-processor authorisation + return/deletion + audit cooperation + DPC cooperation. RECORDS OF PROCESSING (Sec.60): controllers + processors must maintain records of processing activities + categories + purposes + recipients + retention + safeguards + made available to DPC on request. 2024-2025 amendments anticipated to: align with GDPR records-of-processing structure + add DPIA + DPO mandatory provisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.