Yes. Sending marketing emails to people in Ghana is legal, but only on a consent basis. Two statutes do most of the work: the Data Protection Act, 2012 (Act 843), which governs how you collect and use personal data, and the Electronic Transactions Act, 2008 (Act 772), which deals directly with unsolicited electronic communications. Together they make Ghana an opt-in market, closer to the European model than to the US opt-out approach.
This page is general information, not legal advice. For a specific campaign, speak to a Ghanaian lawyer or check guidance from the Data Protection Commission.
The short answer, rule by rule
| Rule | Where it comes from | What it means for your list |
|---|---|---|
| Prior written consent for direct marketing | Act 843, section 40 | You need a recorded opt-in before sending promotions. “Written” can be electronic, as long as it is stored. |
| No unsolicited commercial messages without consent | Act 772, section 50 | Cold emailing bought or scraped addresses is off the table. |
| An easy way to cancel, plus disclosure of your data source | Act 772, section 50 | Every message needs a working unsubscribe, and you must be able to say where you got the address. |
| Registration of data controllers | Act 843, administered by the Data Protection Commission | Organisations processing personal data in Ghana register with the Commission and renew the certificate every two years. |
Act 843: consent and the right to object
Section 40 of the Data Protection Act prevents a data controller from using personal data for direct marketing without the data subject’s prior written consent. The Act defines direct marketing broadly, covering advertising or marketing material sent “by whatever means” to particular individuals, so it captures email, SMS, WhatsApp-style messages and phone calls alike. A person who later objects must be taken off your marketing lists, with no exception.
The Data Protection Commission (DPC) enforces the Act. Beyond consent, it expects you to keep data accurate, secure and limited to what you actually need. If your customer database sits in a CRM or email platform, that platform is your processor, and you remain responsible for choosing one with appropriate security safeguards.
Act 772: the anti-spam provision
Section 50 of the Electronic Transactions Act prohibits sending unsolicited electronic communications to consumers without prior consent. When you do send a commercial message, you must give the recipient an option to cancel and tell them where you obtained their details. Practitioner guides (Chambers Global Practice Guides, Advertising & Marketing 2025) put the penalty for breaching section 50 at a fine of up to 5,000 penalty units, a prison term of up to ten years, or both, on conviction. That is a criminal exposure, not just a regulatory slap on the wrist.
The National Communications Authority (NCA) built its Unsolicited Electronic Communications Code of Conduct on the same section. The Code is aimed at licensed telecoms operators and SMS providers, but its principles are a sound checklist for any sender: consent must be opt-in, it must be documented and retrievable, the sender must be clearly identified, and unsubscribing must be free. Read more on our SMS marketing page for Ghana.
What this looks like in practice
- Collect consent at the source. A checkout page in Accra, a seminar registration in Kumasi or a MoMo promotion sign-up should each include a clear, unticked opt-in. A Mailpro subscription form can capture it online in minutes.
- Use double opt-in where it matters. A double opt-in confirmation email gives you the evidence trail the law implies.
- Never buy lists. Purchased contacts cannot meet the section 40 consent test. Our article on why you should never buy email lists covers the deliverability side too.
- Keep transactional and promotional separate. Receipts, account alerts and delivery updates are generally treated differently from promotions. Once you add an offer, the consent rules apply.
- Honour objections immediately. Mailpro removes unsubscribed contacts from future sends automatically.
Sending across borders
Many Ghanaian businesses also sell into Nigeria, Côte d’Ivoire, the UK or the EU. If you email people in the EU or UK, the GDPR or UK GDPR applies to those contacts as well. Act 843 also expects controllers to respect the data protection law of foreign data subjects. Mailpro stores data in Switzerland, which holds an EU adequacy decision, and is outside US jurisdiction; see why Switzerland for details.
Watch for reform
A Data Protection Bill intended to replace Act 843 and turn the Commission into a Data Protection Authority was still being prepared for Parliament in 2026. Until it passes, Act 843 remains the law. Our permission guide shows how to build consent that will hold up under either regime.