Sir Joe on Cyber Security: Key Lessons
At the Bodomase Circuit Methodist Youth Fellowship (MYF) of the Methodist Church Ghana Sports Conference in Drobonso, Sir Joe delivered a talk on “Data Protection and Cyber Security Awareness Among the Youth.” Drawing on Ghana’s Data Protection Act, 2012 (Act 843) and Cybersecurity Act, 2020 (Act 1038), he offered a practical guide for young digital users.
Why Focus on the Youth?
Sir Joe emphasized that young people (ages 15-35) spend over six hours daily online, making them the highest risk group for identity theft, cyberbullying, and data leaks. The core problem is low awareness of legal rights. The goal is simple: understand your rights under Act 843 and the protections under Act 1038.
Part 1: Your Privacy – Data Protection Act (Act 843)
Act 843 establishes the Data Protection Commission to regulate how your personal information is handled. Key rights for youth include:
- Consent is King (Sec 20): No app or service can process your data without your permission. Read those “I agree” boxes.
- Access & Correction (Sec 32-33): You have the right to request all data held about you and to correct any wrong information.
- Deletion (Sec 24): Data cannot be kept longer than necessary. You can demand old accounts be deleted.
- Compensation (Sec 43): If a data breach causes you distress, you are entitled to compensation.
- No Selling Data (Sec 88-89): Selling personal data without authority can lead to heavy fines or up to 5 years in prison.
Part 2: Your Security – Cybersecurity Act (Act 1038)
Act 1038 creates the Cyber Security Authority (CSA) to fight cybercrime. It specifically targets online harms against youth:
- Child Protection (Sec 62-65): Producing or sharing indecent images of a child, online grooming, and cyberstalking carry penalties of 5 to 15 years in prison.
- Sextortion (Sec 66): Threatening to share intimate images to extort money or sex is a serious crime, punishable by 10 to 25 years.
- Non-Consensual Sharing (Sec 67): Sharing intimate images without consent to cause distress can lead to 1 to 3 years imprisonment.
- Reporting (Sec 47): Institutions must report cyber incidents within 24 hours. Individuals should report abuse directly to the CSA.
How Both Laws Work Together in Your Interest
Sir Joe revealed in his speech that, if a company leaks your data, Act 843 provides compensation, while Act 1038 requires them to report the incident. If you face sextortion, Act 843 allows you to demand image deletion, while Act 1038 provides criminal penalties against the offender.
Call to Action for Youth
- Know your rights: You have the right to consent, access, correct, and delete your data.
- Know the risks: Sextortion, grooming, and hacking are real crimes with real jail time.
- Know your duties: Report incidents, secure your devices, and respect others’ data.
Final Thought
Act 843 gives you legal control over your personal data. Act 1038 protects you from cyber harm. In cyberspace, your data is you. Protect it like you protect your body. Sir Joe concluded that, for help on any data and cyber security threat or attack, one can contact the Data Protection Commission, the Cyber Security Authority, or the Police CID Cyber Unit.
Sir Joe entreated members present at the conference to download copies of the two acts and read them for a more and better understanding.
