The Cyber Security Authority (CSA) has fined the Office of the Registrar of Companies (ORC) and Purpleline Solutions Limited a combined GH¢360,000 for breaches of Ghana’s cybersecurity licensing regulations.
The ORC was fined GH¢240,000 for multiple breaches, while Purpleline Solutions was fined GH¢120,000 for providing cybersecurity services without a licence.
Under Section 92 of the Cybersecurity Act, 2020 (Act 1038), the CSA imposed a penalty of 10,000 penalty units for each breach, bringing the ORC’s total fine to GH¢240,000.
The ORC has also been given one month to comply with the outstanding directives.
The CSA also found Purpleline Solutions Limited in breach of Ghana’s cybersecurity regulations after determining that the company provided cybersecurity services without first obtaining a licence from the Authority.
The company applied for a CSA licence on July 15, 2026, but the regulator noted that the application came after the company had already been engaged by the ORC to provide cybersecurity services.
The CSA stressed that applying for a licence does not amount to being licensed and does not permit a company to begin providing regulated cybersecurity services.
Purpleline Solutions was therefore fined 10,000 penalty units, equivalent to GH¢120,000.
The Authority has warned organisations against contracting cybersecurity companies without first verifying their licensing status.
It said institutions cannot engage an unlicensed provider and subsequently expect the provider to obtain the necessary licence.
The CSA has also reminded cybersecurity companies that they must secure the appropriate licence before offering regulated services.
The regulator has urged designated CII institutions, public-sector organisations and other entities covered by the Cybersecurity Act to verify both the licence and the appropriate licence tier of a cybersecurity provider before awarding contracts.
The Authority said it would continue monitoring compliance and sanction institutions and service providers that breach the cybersecurity licensing requirements.
Read the statement below:
