DPC flags six companies for data protection breaches

Mr Akrobotu said Section 53 of the Data Protection Act prohibited data controllers from processing personal information without registering with the Commission.

Bragha Company Limited, an oil and gas firm, was cited for operating for about 30 years without a valid data protection certificate or completing its registration.

Briefing the media after the exercise on Wednesday, Mr Quintin Akrobotu, Director of Regulatory and Compliance at the DPC, said some companies had operated and collected or processed personal data for years without registering with the Commission.