When you manage a client's pages, you see a lot of personal information: customers' names, phone numbers, delivery addresses, payment confirmations, photos and private messages about health, money or family. Customers shared that with the business, not with the whole world, and not with you personally. Handling it carefully is a legal duty and a matter of trust.
The law in Ghana
Ghana's Data Protection Act, 2012 (Act 843) sets out how organisations should treat personal data, and the Data Protection Commission oversees it. In simple terms, the Act expects organisations to:
- collect personal data for a clear and lawful purpose,
- collect only what they need,
- use it only for that purpose, not for something unexpected,
- keep it accurate and secure,
- not keep it longer than needed, and
- respect people's rights, such as asking what is held about them.
As the page manager, you act on the client's behalf, so these expectations apply to how you handle their customers' data too. The Commission's website explains the Act and registration for organisations.
Consent before posting people
A photo of a happy customer, a pupil receiving a prize or a patient at a health event can make a powerful post. Ask first:
- Adults. Ask clearly whether you may post their photo, name or words, and where. A simple written yes in WhatsApp is a good record.
- Ask a parent or guardian. Schools should have a permission process; follow it every time.