The Data Protection Commission (DPC) has announced a regulatory review into the public disclosure of personal information belonging to 1,964 Ghanaians evacuated from South Africa, warning that the exposure could put the affected individuals at risk of identity theft, fraud and other harm.
The Commission said it was concerned about the publication of the evacuees’ names, signatures and records of financial assistance received, particularly given the circumstances surrounding their return to Ghana.
In a statement dated Tuesday, October 20, 2026, the Commission said it would examine the legal basis for the disclosures, the safeguards applied and the extent to which the privacy rights of the affected individuals had been protected.
The development follows the public circulation of records relating to the Ghanaians evacuated from South Africa, with the Minority Caucus in Parliament, the Ministry of Foreign Affairs, JoyNews and other media organisations identified by the Commission as parties whose handling or publication of the information should be assessed.
The Commission acknowledged the importance of transparency, parliamentary oversight, the right to information and freedom of the press.
However, it stressed that the pursuit of public accountability did not automatically justify unrestricted disclosure of identifiable personal information.
“Any such disclosure as done by Members of the Minority Caucus, the Ministry of Foreign Affairs, Joy News and other media houses must be assessed against the applicable legal requirements, its intended purpose and the rights of the individuals concerned,” the statement said.
The Commission cited Article 15(1) of the 1992 Constitution, which protects human dignity, and Article 18(2), which guarantees individual privacy. It also referenced the Data Protection Act, 2012 (Act 843), particularly Sections 18, 19 and 20, which address lawful and reasonable processing, minimality and the legal grounds for processing personal data.
It noted that the Ministry of Foreign Affairs and the Parliament of Ghana were registered data controllers in good standing with the Commission, but emphasised that registration did not exempt them from their continuing obligations under the law.
The Commission has urged the Minority Caucus, the Foreign Affairs Ministry, JoyNews and other media organisations to exercise due diligence in handling and publishing the records.
It also called on all parties to take protective measures, including restricting access to or redacting publicly available personal identifiers whose continued disclosure is not legally justified.
The regulatory review, it said, would involve engagement with the relevant parties within its statutory mandate, taking into account constitutional protections and applicable legal exceptions.
“Where non-compliance is established, the Commission will take appropriate regulatory action in accordance with Act 843,” it stated.
The Commission further reminded public institutions, media organisations and other entities processing personal data that compliance with data protection requirements is an ongoing responsibility.
“The right to privacy and personal dignity must remain central to the exercise of public accountability,” the statement said.
The evacuation of the 1,964 Ghanaians from South Africa has brought attention to the handling of personal information relating to citizens returning under such circumstances.
The Commission reaffirmed its commitment to the fair, independent and consistent enforcement of Ghana’s data protection laws.
