Ghana Cyber Security Authority Fines EY GH¢360,000

Accra, Ghana — August 18, 2026

The Cyber Security Authority (CSA) has fined Ernst & Young (EY) Ghana GH¢360,000 for providing regulated cybersecurity services without the required licence.

The Authority said EY Ghana continued to provide cybersecurity services despite being directed to comply with Ghana’s cybersecurity licensing requirements.

According to the CSA, EY Ghana had been directed in March 2026 to apply for a Cybersecurity Service Provider licence within 15 days. The Authority later found three separate cases of non-compliance.

Each breach attracted a penalty of GH¢120,000, bringing the total fine to GH¢360,000.

The company has been given 14 days to pay the penalty.

The CSA has also ordered EY Ghana to stop providing regulated cybersecurity services until it obtains the required licence.

The Authority stressed that companies providing cybersecurity services in Ghana must obtain the appropriate licence before operating, regardless of their size or reputation.

The case highlights the growing regulatory attention being given to cybersecurity as Ghana continues to rely more heavily on digital systems.