Skip to content
iEasySRiEasySR
Back to home

Ghana Data Protection Commission (DPC) registration pack

Practical guidance, not legal advice. Confirm the current requirements and fees with the DPC.

If your school operates in Ghana, the Data Protection Act, 2012 (Act 843) requires you to register with the Ghana Data Protection Commission (DPC) as a data controller. Your school is the controller; iEasySR is your data processor. Enforcement is active (the grace period ended on 31 December 2025). This page brings together what you need for your application, plus our disclosures to copy in.

What you register as

  • Controller: your school.
  • Processor: iEasySR, to be disclosed as your third-party, cross-border data processor.

What to state on the application

  • Description of data: learner names, dates of birth, gender, photos, parent/guardian contacts, health records where kept, academic results and attendance, and staff HR data if you use that module.
  • Purpose of processing: educational administration, enrolment, term scoring, report-card generation, attendance, fee billing, and statutory reporting.
  • Data-processor disclosure: iEasySR Pty Ltd (Australia), a cloud software provider, is your data processor; data is stored in the United Kingdom with limited sub-processing in the United States.
  • Designated supervisor: appoint an internal staff member as your data-protection supervisor (or officer).

Our disclosures (copy into your file)

  • Processor: iEasySR Pty Ltd, a company registered in Australia.
  • Role: cross-border data processor providing cloud school-management software.
  • Hosting: primary storage in the United Kingdom (Neon, London); sub-processing in the United States (file storage, email, payments, optional AI). See Annex C of the Data Processing Agreement.
  • Security: measures set out in Annex B of our Agreement, designed to meet Section 28 of Act 843.
  • Agreement: a Data Processing Agreement is available, and a signed copy can be provided on request.

Registration steps

  • Prepare your details (name, address, description of the processing).
  • Appoint your data-protection supervisor.
  • Submit the application through the DPC portal.
  • Pay the fee for your category.
  • Renew every two years.

Fees (indicative)

Fees depend on the size of the institution. As a guide: small/community schools from around GHS 500; basic/secondary schools between GHS 1,000 and GHS 2,500; large institutions/tertiary up to GHS 5,000. Confirm current amounts with the DPC.

Does iEasySR register separately in Ghana?

Generally no: as a cloud vendor with no office, employees or business registration (TIN) in Ghana, iEasySR is declared on your school's registration rather than registering separately. If iEasySR establishes a local entity, that entity would register as a processor.

Documents to attach

DPC website: dataprotection.org.gh. Questions: support@ieasysr.com.

iEasySR | Ghana DPC registration pack