Description

Parliament adopted Virtual Asset Service Providers Act, 2025 including cybersecurity requirement

On 12 December 2025, Parliament adopted the Virtual Asset Service Providers Act, 2025, which includes a cybersecurity requirement, on third reading. The Act's date of entry into force will be announced. The Act will apply to virtual asset service providers providing such a service from or in Ghana. Virtual assets are defined as digital representations of value that can be digitally traded or used for payment, though excluding central bank digital currencies and representations of fiat currency. Section 36 of the Act requires virtual asset service providers to maintain effective and efficient cybersecurity measures and submit cybersecurity reports to the relevant regulatory authority in the form and frequency specified by the authority.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2025-11-13
under deliberation

On 13 November 2025, a bill to enact the Virtual Asset Service Providers Act, 2025, which includes …

2025-12-12
adopted

On 12 December 2025, Parliament adopted the Virtual Asset Service Providers Act, 2025, which includ…