The Data Protection Commission (DPC) has assured that it is actively monitoring a potential cybersecurity incident, which resulted in unauthorised access to the Personal Information of some MTN customers
In a statement dated Friday, April 25, the commission underscored that it is engaging closely with MTN Ghana, the National Communications Authority and the Cybersecurity Authority to get to the root of the matter.
DPC indicated that MTN Ghana will face the consequences pursuant to Act 843 if investigations reveal that personal information of any Ghanaian has been compromised.
“Should it be determined that the Personal Information of any Ghanaian citizen or resident has been compromised as a result of negligence, the Commission will not hesitate to invoke its enforcement powers under Act 843 to hold MTN Ghana and/or MTN Group accountable.
“The Commission wishes to reiterate to the public that the privacy and protection of Personal Information is a fundamental right, and all Data Controllers and Processors operating within Ghana or processing the Personal Information of Ghanaian citizens are expected to adhere strictly to the provisions of Act 843,” the statement read.
DPC urged all public and private institutions to register with the Commission.
“This registration ensures that these entities are accountable for how they handle Personal Information. To safeguard your Personal Information, always check if an institution or service provider you engage with is licensed.”
The commission further encouraged the public to remain vigilant, adopt recommended digital safety measures and practices, and report any suspicious activity to their service providers and the Commission, adding that updates on the ongoing investigations will be provided.
“The Data Protection Commission will provide further updates to the public as the situation evolves and commits to maintaining transparency, accountability, and the protection of individual rights in the digital space.”
