meta_id 3230815

On June 10, 2026, the Securities and Exchange Commission (SEC) issued Directive Number SEC/DIR/001/06/2026 requiring all capital market operators to register with the Data Protection Commission (DPC) and comply with the Data Protection Act, 2012 (Act 843). The directive establishes proof of registration or renewal with the DPC as a mandatory eligibility criterion for licensing and registration of all market operators. The SEC, mandated under the Securities Industry Act, 2016 (Act 929) to promote orderly growth and development of an efficient, fair, and transparent securities market, issued this directive to safeguard personal data and privacy rights of individuals in the capital market. Capital market operators must comply with sections 27(1) and 46(3) of the Data Protection Act, 2012 (Act 843), which establish registration requirements with the DPC. The directive applies to all entities operating within Ghana's capital market framework and represents an integration of data protection obligations into the SEC's regulatory licensing regime. The SEC may take enforcement action under section 209(4) of the Securities Industry Act against operators that breach the directive's provisions. The directive is issued pursuant to section 209 of the Securities Industry Act, Part Three 12(8), 12(13), 12(14), Part Six 27(4), (5) and (6), and 28 of the Securities Industry (Conduct Of Business) Guidelines 2020. All licensed market operators must comply with this directive no later than July 10, 2026. The directive takes effect on July 11, 2026, and remains in force until otherwise revised, varied, amended, or revoked. Capital market operators requiring clarification on compliance requirements should contact the SEC at info@sec.gov.gh, by telephone at 0302768970-2, or through its toll-free number 0800100065.