Data protection

Adhering to Ghana's Data Protection Act, 2012 (Act 843).

Regulatory Oversight

GrayDocket is fully registered with the Data Protection Commission (DPC) of Ghana as a Data Controller. This registration is a legal requirement for any entity handling personal data in Ghana.

The 8 Guiding Principles

We strictly follow the eight data protection principles outlined in Act 843:

  • Accountability: We take responsibility for the data we handle.
  • Lawfulness of Processing: Data is only processed with consent or legal necessity.
  • Specification of Purpose: Data is only used for the services you requested.
  • Compatibility of Further Processing: No surprise usage of your data.
  • Quality of Information: We strive to keep your data accurate.
  • Openness: We are transparent about our data practices.
  • Data Security Safeguards: Prevent unauthorized access or loss.
  • Data Subject Participation: You have the right to access and correct your data.

Data Protection Officer

GrayDocket has a designated Data Protection Officer who ensures that our internal processes remain compliant with evolving regulations.