Ghana: National Communications Authority closes consultation on Electronic Communications Act, 2025 including data protection regulation

On 14 November 2025, the National Communications Authority closes its consultation on the Electronic Communications Act, 2025, which includes provisions for data protection regulation. Electronic communications and broadcasting service providers would be required to comply with the Data Protection Act, 2025 in their collection, processing, and storage of personal data. The National Communications Authority, in consultation with the Data Protection Commission, would be empowered to issue sector-specific data protection guidelines. Service providers could only retain metadata as required by law for national security or billing purposes, with a maximum retention period defined by the Authority. Telecommunication service providers would need to implement subscriber verification systems interoperable with national identity databases, while biometric data collection would require a prior data protection impact assessment in accordance with the Data Protection Act.