Ghana: technology regulation at a glance

Framework: Virtual Asset Service Providers Act, 2025 (Act 1154); dual regulators, Bank of Ghana (primary VASP licensor, Virtual Assets Regulatory Office) and Securities and Exchange Commission Ghana (exchanges, token issuance, investment-related services); Financial Intelligence Centre (AML/CFT)

Ghana enacted the Virtual Asset Service Providers Act, 2025 (Act 1154), signed by President John Dramani Mahama on 29 December 2025, formally legalising and licensing crypto trading. The law establishes a dual-regulator framework under the Bank of Ghana and SEC Ghana, mandates FATF-aligned AML/CFT controls including the Travel Rule, and confirms virtual assets are not legal tender. Full licensing directives are being phased in throughout 2026, with a 12-month regulatory sandbox of 11 firms underway since March 2026.

Framework: National AI Strategy 2025-2035 (launched April 2026) and Ghana AI Practitioners' Guide (December 2025), with the Data Protection Act 2012 (Act 843) providing incidental AI-relevant rules; no binding AI-specific law yet in force

Ghana has no comprehensive AI-specific legislation in force. The government officially launched a 10-year National AI Strategy 2025-2035 on 24 April 2026, setting out a voluntary roadmap across eight strategic pillars with a proposed Responsible AI Authority. A Data Protection Bill 2025, which contains explicit AI and automated-decision provisions, was introduced for parliamentary consideration in early 2026 but has not yet been enacted.

Framework: Data Protection Act, 2012 (Act 843); supervised by the Data Protection Commission (DPC); Data Protection Bill 2025 pending parliamentary enactment to replace Act 843

Ghana has a comprehensive data protection regime anchored in the Data Protection Act, 2012 (Act 843), which mandates registration of data controllers, enshrines data subject rights, and restricts cross-border transfers. The Data Protection Commission (DPC) is the independent supervisory authority established under Act 843. A new Data Protection Bill 2025, proposing a full repeal and replacement of Act 843 with stronger rights, an empowered Data Protection Authority, mandatory breach notification, and AI/automated-decision provisions, was under active legislative consideration as of May 2026 but had not yet been enacted into law.

Framework: Payment Systems and Services Act, 2019 (Act 987), administered by the Bank of Ghana (BoG) through its Fintech and Innovation Office

Ghana operates a dedicated, in-force licensing regime for digital payments and e-money under the Payment Systems and Services Act, 2019 (Act 987), enforced by the Bank of Ghana. The Act provides graduated licences for Payment Service Providers (Enhanced/Medium/Standard) and Dedicated Electronic Money Issuers, supported by interoperable instant-payment rails (GhIPSS Instant Pay / GhanaPay). The framework continues to expand: a dedicated Digital Credit Services Provider licensing regime opened in late 2025, while an open banking framework remains at the pilot/proof-of-concept stage.

Framework: Ghana Immigration Act, 2000 (Act 573) and Ghana Citizenship Act, 2000 (Act 591), administered by the Ghana Immigration Service (GIS); Ghana Investment Promotion Centre Act, 2013 (Act 865) for investor pathways

Ghana has no dedicated digital nomad or remote-work visa as of 2026. Remote workers seeking legal work authorisation must either register a business in Ghana and obtain a Work and Residence Permit, or, if of African descent, apply for the Right of Abode, which grants indefinite residence and unrestricted work rights without a separate work permit. Tourist visas (up to 90 days) carry no work authorisation.

Framework: Cybersecurity Act, 2020 (Act 1038) + Electronic Transactions Act, 2008 (Act 772) + Electronic Communications Act, 2008 (Act 775); regulated by the Cyber Security Authority (CSA) and National Communications Authority (NCA)

Ghana's online safety regime is built on intersecting ICT and cybersecurity statutes rather than a single dedicated online-safety law. The Cybersecurity Act 2020 (Act 1038) establishes the Cyber Security Authority, criminalises cybercrimes including child sexual abuse material, and imposes incident-reporting duties on service providers, but broad EU DSA- or UK OSA-style platform content-moderation obligations do not yet exist in force. A Cybersecurity (Amendment) Bill 2025, in public consultation as of late 2025, proposes expanded platform duties and enforcement powers, while separate age-verification legislation for minors' access to adult content was being prepared for Cabinet submission as of December 2025.

Framework: Cybersecurity Act, 2020 (Act 1038), administered by the Cyber Security Authority (CSA)

Ghana enacted a standalone, comprehensive cybersecurity law, the Cybersecurity Act, 2020 (Act 1038), which established the Cyber Security Authority (CSA) as the primary regulator, mandated protection of Critical Information Infrastructure (CII) across 13 designated sectors, and imposed incident-reporting and licensing obligations. The Data Protection Act, 2012 (Act 843) runs in parallel, requiring breach notification to the Data Protection Commission. A Cybersecurity (Amendment) Bill, 2025 was published for public consultation in October 2025 and, as of May 2026, has not yet been enacted by Parliament.

Framework: Companies Act 2019 (Act 992) governing incorporation; Ghana Investment Promotion Centre Act 2013 (Act 865) governing foreign participation and minimum capital; Office of the Registrar of Companies (ORC) as the registration authority

Ghana permits foreign ownership of companies in most sectors but mandates mandatory registration with the Ghana Investment Promotion Centre (GIPC) for any enterprise with foreign participation, and imposes statutory minimum capital thresholds of US$200,000-US$1,000,000 depending on structure and activity. The core incorporation process is digitalised via the ORC's e-Registrar portal and can be completed in days to weeks, but the parallel GIPC registration requirement and capital obligations add meaningful complexity for foreigners. Certain retail and petty-trading activities are legally reserved exclusively for Ghanaian citizens.