Businesses across Ghana are facing growing pressure to strengthen their data protection systems as digital transactions surge, with Abdul-Majeed Rufai, Acting Chief Commercial Operations Officer of MTN MoMo, warning that failure to comply with data protection regulations could expose companies to heavy penalties and reputational damage.
Speaking in an interview, Mr. Rufai said the rise in e-commerce, mobile money, and digital service platforms has made data protection a central business concern.
He noted that while Ghana’s digital economy is expanding rapidly, many enterprises, especially small and medium-sized firms have yet to take compliance with the Data Protection Act seriously.
“In today’s digital economy, customer data is one of the most valuable business assets,” he said. “But with that comes responsibility. Businesses must ensure they collect, process, and store personal information securely and lawfully. Unfortunately, many still treat it as an afterthought.”
Mr. Rufai explained that as mobile financial services continue to grow, companies are handling unprecedented volumes of sensitive personal data from financial transactions and identity information to location and device details. He said this makes compliance with data protection laws not just a legal obligation but a business imperative.
“At MTN MoMo, we deal with millions of transactions daily. Protecting customer data is not negotiable, it’s central to trust,” he said.
“One breach can erode customer confidence and take years to repair. That’s why compliance must be embedded into every business process, not left to chance.”
He noted that Ghana’s Data Protection Commission (DPC) has intensified enforcement efforts, including registration audits and fines for non-compliant firms, a sign that the regulatory environment is maturing.
However, he cautioned that many businesses, particularly in the informal and SME sectors, lack awareness of these obligations.
“Some companies still don’t know they are required by law to register with the Data Protection Commission,” he said. “Others collect data but don’t have systems to secure it properly. This leaves both customers and businesses vulnerable.”
Mr. Rufai urged companies to take proactive steps to audit their data practices, implement encryption and access control measures, and train employees on privacy protocols. “Data protection should not be left to IT departments alone, it’s everyone’s responsibility,” he emphasized.
He also highlighted the role of leadership in driving compliance, adding that business owners must set the tone from the top.
“Executives must prioritize data security in their risk management strategies. It should be discussed at the board level, not only after a breach occurs,” he said.
According to Mr. Rufai, as digitalization deepens under Ghana’s cash-lite agenda, sectors such as banking, telecoms, e-commerce, and fintech face increasing scrutiny over how they handle customer information.
He said regulatory compliance will soon become a key competitive advantage for businesses that invest in privacy frameworks.
“Customers will naturally trust brands that demonstrate accountability,” he said. “In the digital space, trust is currency. Companies that respect customer privacy will always stand out.”
He further called for broader collaboration between regulators and the private sector to promote awareness, simplify compliance processes, and create a culture of digital responsibility.
“The goal should not be to punish but to build capacity,” he noted. “If we help businesses understand why compliance matters, they’ll see it as an investment in sustainability.”
Mr. Rufai also encouraged the integration of emerging technologies such as artificial intelligence and blockchain to enhance data security, noting that automation can help detect anomalies and prevent breaches before they escalate.
“As technology evolves, so must our defenses,” he said. “Businesses that ignore data protection today may find themselves irrelevant tomorrow.”
He said that data privacy is the backbone of a trusted digital economy and must remain a top national priority. “Ghana’s digital transformation will only succeed if businesses protect the people they serve. Without trust, technology cannot thrive,” he added.
