The Cyber Security Authority (CSA) of Ghana has announced a major regulatory enforcement action targeting unlicensed cybersecurity service providers, establishments, and professionals.

Starting January 31, 2026, all entities and individuals offering cybersecurity services without proper accreditation will face sanctions, including criminal prosecution and administrative penalties.

The move follows earlier directives requiring Cybersecurity Service Providers (CSPs), Cybersecurity Establishments (CEs), and Cybersecurity Professionals (CPs) to obtain licenses or accreditation to operate legally in Ghana.

The CSA will enforce the Cybersecurity Act, 2020 (Act 1038), specifically Section 49(1), which prohibits unlicensed cybersecurity operations.

According to the CSA, offering cybersecurity services without proper authorization violates the law and subjects offenders to penalties under Section 49(2) of the Act.

The authority advises institutions and individuals to engage only with CSA-licensed CSPs and accredited CEs and CPs.

In the coming days, the CSA plans to publish a full list of licensed and accredited cybersecurity service providers and professionals. The public can verify the accreditation status of any entity or individual by checking the certificate number online at https://www.csa.gov.gh/licence.

For further clarification, the CSA can be contacted via email at compliance@csa.gov.gh or by phone at 0531140408.

This crackdown is part of Ghana’s broader effort to strengthen its cybersecurity framework and ensure that service providers meet national standards.