Data Protection in Pre-Tertiary Schools In Ghana

Purpose: The study examines data protection practices in pre-tertiary schools in Ghana, specifically focusing on compliance with the Data Protection Act, 2012 (Act 843). Study design/methodology/approach: It adopts a mixed-method approach, surveying representatives from one hundred schools and interviewing representatives from sixteen schools and two education offices. Respondents were staff assigned to manage school data from three strata: the basic school level, senior high school level, and the Ghana Education Service. Findings: The findings reveal a general awareness of data protection laws among staff handling and managing data. However, it also uncovers a significant gap in their understanding of principles and legal obligations. The study also identifies a lack of coordination, formal guidance, inadequate consent procedures, and fragmented implementation strategies in data protection practices. Furthermore, the use of varied data protection mechanisms by different schools suggests a lack of standardised security protocols, which is likely to result in security gaps. This is particularly noteworthy considering the frequent data transfers and the challenging data protection environment that combines physical and digital storage methods in potentially unsecured locations across multiple schools. Originality/value: The findings can contribute to developing a standardised data protection policy for Ghanaian pre-tertiary schools, enhanced employee training, and increased awareness to ensure effective compliance and protection of personal data in Ghana’s pre-tertiary education system, thereby mitigating potential risks of data breaches and privacy violations.