CSA Fines Office of Registrar of Companies GH¢240k for Using Unlicensed Cybersecurity Provider
Ghana's Cyber Security Authority has fined the Office of the Registrar of Companies GH¢240,000 for engaging an unlicensed cybersecurity provider. The action marks a concrete enforcement precedent under Ghana's cybersecurity licensing regime, signalling that state agencies are not exempt from compliance obligations.
CSA Fine: the government just fined itself, and that's exactly the point
The Office of the Registrar of Companies — the state body that registers every business in Ghana — hired a cybersecurity firm that wasn't licensed to do the job. The Cyber Security Authority caught it and fined it GH¢240,000.
A government agency getting penalised by another government agency is awkward. It is also the most credible signal a regulator can send.
Private companies watching this now know the licensing rule isn't just paperwork that gets waived when a well-connected provider knocks on the door. If the CSA will fine a public institution, it will fine anyone. For the Ghanaian cybersecurity firms that did the work to get properly licensed, that's the operating environment they needed.