Some Ghanaians are expressing their disagreement with the new Cybersecurity (Amendment) Bill, describing it as a dangerous piece of legislation that could give the state total control over digital spaces.
According to them, the draft law poses serious risks to privacy, and freedom of expression.
The Cybersecurity (Amendment) Bill, 2025, which seeks to update the existing Cybersecurity Act, 2020 (Act 1038), was opened for public consultation from October 1 to October 24, 2025.
In the Cybersecurity (Amendment) Draft Bill 2025, it states:
“AN ACT to amend the Cybersecurity Act, 2020 (Act 1038) to confer powers on the Cyber Security Authority to investigate and prosecute cybercrime on the authority of the Attorney-General and recover proceeds of cybercrime; to revise the object and functions of the Cyber Security Authority; to revise the governance and administration of the Cyber Security Authority; to revise the enforcement powers of the Cyber Security Authority and to provide for related matters.”
The bill proposes granting the Cyber Security Authority (CSA) significant new powers, including the ability to act as a law enforcement body.
This would give the Authority the ability to conduct arrests, searches, freeze assets and seize property.
“The objects of the Authority are to:
(a) regulate cybersecurity activities in the country;
(b) prevent, manage and respond to cybersecurity threats and cybersecurity incidents;
(c) regulate owners of critical information infrastructure in respect of cybersecurity activities, cybersecurity service providers, cybersecurity professionals and practitioners, and cybersecurity establishments in the country;
(d) promote the development of cybersecurity in the country to ensure a secured and resilient digital ecosystem;
(e) prevent and detect cybercrime;
(f) to facilitate the confiscation of proceeds of cybercrime;
(g) establish a platform for cross-sector engagement on matters of cybersecurity for effective co-ordination and co-operation between key public institutions and the private sector;
(h) create awareness of cybersecurity matters; and
(i) collaborate with States, inter-governmental bodies, international organisations and international agencies to promote the cybersecurity of the country.”
The draft further adds:
“The Authority shall in addition to the functions in section 4, carry out the following functions:
(a) subject to article 88 of the Constitution, to investigate and on the authority of the Attorney-General, prosecute cybercrime under this Act;
(b) establish standards for certifying the security of innovative products, Artificial Intelligence, cloud technology, quantum computing, big data, Internet of Things (IoT), blockchain-based technology and any other emerging technologies;
(c) certify the security of innovative products Artificial Intelligence, cloud technology, quantum computing, big data, Internet of Things (IoT), blockchain-based technology and any other emerging technologies, in accordance with the standards established pursuant to paragraph (b);
(d) accredit the cybersecurity establishments of critical information infrastructure owners, cybersecurity service providers, cybersecurity practitioners and professionals and other relevant persons or institutions;
(e) accredit non-profit cybersecurity institutions and cybersecurity professional bodies;
(f) promote the online protection of women, elderly, persons with disabilities and underserved populations;
(g) collaborate with relevant institutions to develop mechanisms including technical security solutions and guidelines on the usage of smart technology and other emerging technologies; and
(h) promote the protection of digital rights as it relates to cybersecurity.”
On social media, many users have warned that the broad powers granted to the CSA could be used politically, allowing authorities to monitor citizens’ online activities or target government critics under the pretext of cybersecurity enforcement.
The provisions for surveillance and the potential criminalization of online speech are also viewed as a threat to many people.
Many people are calling on the Government and the Minister for Communications, Digital Technology and Innovations Samuel Nartey George to scrap the bill.
