Logo
2/10/2023GhanaGhanaVerified

Cybersecurity Regulations Require NGO Data Localization

Policy ImplementationModerate ImpactImplemented

Summary

New cybersecurity regulations require all NGOs to store data on local servers and provide government access upon request. The regulations cite national security concerns and protection against foreign interference as justifications.

Details

The Ministry of Information and Communications Technology issued new cybersecurity regulations that impact how NGOs manage and store data. Key provisions include:

1. Requirement for all NGOs to store beneficiary data, financial records, and program information on servers physically located within the country
2. Mandatory registration of all database systems with the National Cybersecurity Authority
3. Obligation to provide government authorities with access to data upon request for "national security purposes"
4. Prohibition on using encryption technologies not approved by the government

The regulations have raised significant concerns among civil society organizations, particularly those working on sensitive human rights issues or with vulnerable populations. Organizations have highlighted that the requirements could compromise the confidentiality of their data and put their beneficiaries at risk.

International digital rights organizations have criticized the regulations as disproportionate and potentially violating privacy rights. The government has defended the measures as necessary to protect national security and prevent foreign interference in domestic affairs.

Security Justification

Cybersecurity

Affected Rights

AssociationExpressionPrivacy

Affected Groups

Human rights organizationsInternational NGOsHealth service providers