Reporting Act, 2007(Act 726) to carry out credit bureau activities;
“data” means information which
(a) is processed by means of equipment operating
automatically in response to instructions given for that
purpose,
(b) is recorded with the intention that it should be processed by
means of such equipment,
(c)
is recorded as part of a relevant filing system or with the
intention that it should form part of a relevant filing system, or
(d) does not fall within paragraph (a),(b) or (c) but forms part of an
accessible record;
“data controller” means a person who either alone, jointly with other persons
or in common with other persons or as a statutory duty determines the
purposes for and the manner in which personal data is processed or is to be
processed;
“data protection principles” means the principles set out in sections 17 to 26 of
this Act;
“data processor” in relation to personal data means any person other than an
employee of the data controller who processes the data on behalf of the data
controller;
“data protection functions” means functions that relate to the protection of
personal data in the course of data processing;
“data subject” means an individual who is the subject of personal data;
“enactment” includes an enactment passed after the commencement of this Act;
“data supervisor” means a professional appointed by a data controller in
accordance with section 58 to monitor the compliance by the data
controller in accordance with the provisions of the Act;
“examination” includes any process for determining the knowledge,
intelligence, skill or ability of a candidate by reference to the candidate’s
performance in a test, work or other activity;
“exempt manual data” means information in respect of which a controller is not
required to register before manual
processing or use;
“foreign data subject” means data subject information regulated by laws of a
foreign jurisdiction sent into Ghana from a foreign jurisdiction wholly for
processing purposes;
“ good cause” means any failure to comply with or a violation of any of the data
protection principles, enforcement or other notices issued by the
Commission;
“good practice” means the practice in the processing of personal data in a
way that the likelihood of causing substantial damage or distress is reduced;
“government department” includes a Ministry, Department or Agency and a
body or authority exercising statutory functions on behalf of the State;
“health professional “ means a registered medical practitioner or a recognised
traditional healer or any person who is registered to provide health services
under any law for the time being in force;
“information notice” means notice given by the Commission pursuant to a