The Data Protection Commission (DPC) has announced plans to investigate the public disclosure of personal information belonging to 1,964 Ghanaian citizens evacuated from South Africa, warning that the publication of identifiable records could expose the affected individuals to privacy violations, fraud and other forms of harm.
In a press release issued on Tuesday, October 20, 2026, the Commission expressed serious concern over reports that personal details of the evacuees, including their names, signatures and records of financial assistance received, had been made public.
The Commission says the disclosure of such information is particularly concerning given the circumstances surrounding the affected individuals, noting that exposing their personal details could subject them to unwarranted public scrutiny and potential identity theft.
It stressed that the protection of personal information is essential to safeguarding the privacy and dignity of the evacuees, regardless of the public interest surrounding the circumstances of their evacuation or the financial assistance provided to them.
The Commission cited Articles 15(1) and 18(2) of the 1992 Constitution, which protect the dignity and privacy of individuals, respectively.
It also referred to Sections 18, 19 and 20 of the Data Protection Act, 2012 (Act 843), which establish requirements relating to the lawful and reasonable processing of personal data, data minimality and the legal grounds for processing such information.
According to the Commission, these legal provisions require organisations and individuals handling personal information to ensure that its collection, use and disclosure comply with applicable legal standards.
It warned that the publication of identifiable personal details must be assessed against the relevant legal requirements, the purpose of the disclosure and the rights of the individuals concerned.
The DPC acknowledged the importance of transparency, parliamentary oversight, the right to information and press freedom in promoting accountability in public affairs.
However, it cautioned that the pursuit of these objectives do not automatically justify the unrestricted publication of personal information.
The Commission specifically identified the Minority Caucus in Parliament, the Ministry of Foreign Affairs, Joy News and other media organisations as parties whose handling and disclosure of the records should be assessed against the applicable legal requirements.
It emphasised that public accountability and the protection of personal privacy must be pursued in a manner that respects the rights of individuals whose information is involved.
The Commission’s position underscores the need to distinguish between information necessary for public scrutiny and personal identifiers whose disclosure may be unnecessary or unjustified.
The Commission also confirmed that the Ministry of Foreign Affairs and the Parliament of Ghana are registered data controllers in good standing with the DPC.
However, it stressed that registration does not exempt the institutions from their continuing obligations under the Data Protection Act.
Data controllers are expected to ensure that personal information under their control is handled in accordance with the law, including when records are shared with other parties or made available to the public.
The Commission urged the Minority Caucus, the Ministry of Foreign Affairs, Joy News and other media organisations to exercise due diligence in handling, disclosing and publishing the records relating to the evacuees.
It called on the relevant parties to take appropriate protective measures within their respective responsibilities, including the immediate restriction or redaction of publicly accessible personal identifiers whose continued disclosure cannot be legally justified.
Such measures, the Commission indicated, should help limit the potential risks associated with the continued availability of the information.
The DPC announced that it would undertake a regulatory review to establish the legal basis for the disclosures, examine the safeguards applied and determine the extent to which the privacy rights of the affected individuals had been protected.
As part of the process, the Commission said it would engage the relevant parties within its statutory mandate, taking into account the constitutional protections and legal exceptions applicable to the matter.
It further warned that where non-compliance with the Data Protection Act is established, it would take appropriate regulatory action in accordance with the law.
The announcement signals the Commission’s intention to examine the handling of the evacuees’ records while balancing the need for public accountability with the legal protections afforded to personal information.
The Commission used the opportunity to remind public institutions, media organisations and other persons processing personal data that compliance with data protection requirements is a continuing responsibility.
It maintained that the right to privacy and personal dignity must remain central to the exercise of public accountability.
The DPC reaffirmed its commitment to the fair, independent and consistent enforcement of Ghana’s data protection laws.
The review is expected to examine whether the parties involved had sufficient legal grounds for disclosing the records and whether appropriate safeguards were applied to protect the affected evacuees.
By 1960news.com
