Cookie Policy (Ghana)

A Cookie Policy in Ghana establishes the obligations and procedures governing the conduct it regulates.

The Data Protection Act 2012 (Act 843) was enacted to regulate the processing of personal data in Ghana and established the Data Protection Commission (DPC) as the supervisory authority responsible for enforcing Act 843 and registering data controllers. Under Section 15 of Act 843, all data controllers — including website operators who collect personal data through cookies — must register with the Data Protection Commission (DPC) before processing personal data about Ghanaian data subjects. Cookie-based tracking that collects personal data constitutes processing under Act 843, which defines personal data broadly to include any information that directly or indirectly identifies a living individual.

Although Ghana's Data Protection Act 2012 (Act 843) does not contain provisions identical to the European Union's ePrivacy Directive or the EU General Data Protection Regulation (GDPR), the Data Protection Commission (DPC) has issued guidance indicating that website operators serving Ghanaian users should implement informed consent mechanisms for non-essential cookies — particularly for analytics platforms such as Google Analytics and advertising networks such as Meta Pixel and Google Ads — before placing those cookies on users' devices. The Electronic Transactions Act 2008 (Act 772) also contains provisions relevant to electronic communications and data security that apply to websites operating in Ghana.

A Cookie Policy in Ghana must be distinguished from a Privacy Policy, which addresses the full scope of personal data processing activities across all channels and touchpoints, not only cookies. The Cookie Policy is typically incorporated by reference into the Privacy Policy and the Website Terms of Service and is accessible from a prominent link in the website footer and from any cookie consent banner displayed on the homepage. The Cookie Policy should be reviewed and updated whenever new cookies or tracking technologies are deployed on the website or when the data protection requirements of the Data Protection Commission (DPC) are updated.

Companies operating in Ghana that serve users in the European Union must additionally comply with the GDPR and the EU Cookie Law (ePrivacy Directive 2002/58/EC), which require prior opt-in consent for all non-essential cookies. The Data Protection Act 2012 (Act 843) is administered by the Data Protection Commission, located in Accra, which handles complaints, conducts investigations, and imposes sanctions under Section 72 of Act 843.

A Cookie Policy in Ghana is required whenever a website or mobile application operator collects personal data through cookies or similar tracking technologies, and is particularly important in the following circumstances.

A Cookie Policy is required when any company incorporated under the Companies Act 2019 (Act 992) operates a website that uses analytics tools — such as Google Analytics, Hotjar, or Meta Pixel — which place persistent or session cookies on visitors' devices and transmit browsing data to third-party servers. This constitutes processing of personal data under Section 2 of the Data Protection Act 2012 (Act 843).

A Cookie Policy is needed when a website uses advertising cookies or retargeting pixels from platforms such as Google Ads, Meta (Facebook), LinkedIn, or Twitter to track user behaviour across the internet and serve targeted advertisements. These marketing cookies require specific disclosure under Data Protection Commission (DPC) guidance.

A Cookie Policy is required when a website operator registered with the Data Protection Commission (DPC) of Ghana undergoes a DPC audit or receives a data subject complaint about undisclosed tracking. The absence of a Cookie Policy is treated as a failure to meet the transparency obligations under Section 17 of Act 843 and exposes the operator to enforcement action.

A Cookie Policy is needed when a company operating an e-commerce platform in Ghana — governed by the Electronic Transactions Act 2008 (Act 772) — uses session cookies for shopping cart functionality and persistent cookies for personalisation and targeted marketing, requiring clear disclosure of each category and its purpose.

A Cookie Policy is required before a website operator may lawfully obtain consent for non-essential cookies from Ghanaian users, as consent must be informed, specific, and freely given to be valid under Act 843. A cookie consent banner without a supporting Cookie Policy does not constitute informed consent.

A Cookie Policy is needed when an organisation collects cookies on behalf of a government body, a financial institution regulated by the Bank of Ghana (BoG), or an insurance company regulated by the National Insurance Commission (NIC), where sector-specific data protection obligations supplement the requirements of Act 843.

Website operators should publish and maintain an up-to-date Cookie Policy before deploying any non-essential cookies, and should review the policy whenever the website's technology stack changes.

A valid Cookie Policy in Ghana under the Data Protection Act 2012 (Act 843) must contain the following essential elements.

Operator Identity and Contact Details: The full legal name, company registration number (if incorporated under the Companies Act 2019 — Act 992), registered address, and contact email address of the website operator, who is the data controller responsible for compliance with Act 843. The Data Protection Commission (DPC) registration number should also be included where the operator is registered.

What Cookies Are: A plain-language explanation of what cookies are, how they function, and the difference between session cookies (which expire when the browser is closed) and persistent cookies (which remain on the device for a specified period after the browser session ends).

Categories of Cookies: A clear breakdown of the cookies used on the website, categorised as: (1) Strictly Necessary Cookies — essential for the website to function, no consent required; (2) Functional Cookies — remember user preferences such as language and region; (3) Analytics Cookies — collect aggregated data about website usage, such as Google Analytics tracking cookies; and (4) Marketing and Advertising Cookies — track browsing behaviour for targeted advertising, such as the Meta Pixel and Google Ads conversion cookies.

Cookie Inventory Table: A table listing each specific cookie name, its category, its purpose, the third party placing it (if applicable), and its expiry period. This level of detail satisfies the transparency requirements of Section 17 of the Data Protection Act 2012 (Act 843).

Consent Mechanism: A description of how the website obtains, records, and manages user consent for non-essential cookies, including the operation of the cookie consent banner or cookie preference centre accessible from the website footer. Consent must be freely given, specific, informed, and unambiguous under Act 843.

Opt-Out and Cookie Management: Instructions for how users can withdraw consent, delete cookies, or manage cookie preferences through their browser settings. For Google Analytics, the Google Analytics Opt-out Browser Add-on should be referenced. For advertising cookies, links to opt-out pages such as the Network Advertising Initiative (NAI) opt-out tool should be provided.

Data Transfers: Disclosure of any transfers of cookie data to third parties outside Ghana, including the countries to which data is transferred and the safeguards in place under the Data Protection Act 2012 (Act 843).

Contact and Complaints: Contact details for the data controller's Data Protection Officer (DPO) or privacy contact, and the right of Ghanaian users to lodge a complaint with the Data Protection Commission (DPC) in Accra. Forms-legal.com provides this template as a starting point for Ghana-compliant cookie disclosure.

Additional compliance elements for a Cookie Policy (Ghana) used in Ghana include: Under the Companies Act 2019 (Act 992), the Registrar General's Department (RGD) maintains the register of Ghanaian companies. Section 7 of the Companies Act 2019 governs company incorporation. The Ghana Revenue Authority (GRA) administers corporate tax under the Income Tax Act 2015 (Act 896). The Commercial Division of the High Court in Accra adjudicates business disputes. The Ghana Investment Promotion Centre (GIPC) regulates foreign investment under the GIPC Act 2013 (Act 865). Forms-legal.com provides this template as a starting point for Ghana-compliant documentation.