Academy›🤝 Customers and selling

Looking after customer data

The Data Protection Act, 2012 and what it means for a business with customer records.

⏱ 6 min Lesson 2 of 3

The Data Protection Act, 2012 (Act 843) covers anyone who keeps personal data — names, phones, addresses.

Businesses that process personal data must register with the Data Protection Commission as data controllers.

Collect only what you need, and tell customers why you collect it.

Get consent before sending marketing messages, and stop when asked.

Protect records with passwords, and limit who can see them.

1 / 5 ·

📌What you need to know

Registration certificates last two years and must be renewed.
Processing personal data without registering is an offence under Act 843.
Staff records are personal data too.
The Commission publishes a register where anyone can check a business's registration.

In Ghana: the numbersChecked 14 October 2026

LawData Protection Act, 2012 (Act 843)

RegistrationData Protection Commission

CertificateRenew every 2 years

Sharing customers' numbers with another business.

Sending bulk SMS to customers who never agreed to it.

Leaving customer lists on a shared computer with no password.

💡

Tip. Add one line to your receipts or forms: what you collect and why. It builds trust.

Do it in DatanaDatana handles this part for you.

Sources · checked 14 October 2026