Data Protection Commission probes access to patient data in Lightwave eHealthCare dispute

The Data Protection Commission (DPC) has commenced a formal investigation into the handling and accessibility of patient data managed by Lightwave eHealthCare Solutions, the private contractor formerly responsible for Ghana’s National Electronic Medical Records and Patient Management System.

The probe follows a national controversy surrounding the Lightwave Health Information Management System (LHIMS), which the Minister of Health, Kwabena Mintah Akandoh, accused the vendor of deliberately shutting down amid a standoff over the renewal of its service and maintenance agreement.

According to the Minister, the government demanded that Lightwave eHealthCare Solutions transfer full administrative access and ownership of patient data to the state as a precondition for renewing the contract.
The company reportedly refused to comply, triggering a system shutdown that disrupted health service delivery across several major hospitals nationwide.

The shutdown has reignited public debate about data sovereignty, vendor control in national IT systems, and the protection of personal health records.

In a statement issued on Wednesday, October 29, 2025, the DPC confirmed that the inquiry is being conducted under the supervision of the Minister for Communication, Digital Technology, and Innovation, and in collaboration with:

The Ministry of Health,

The Cyber Security Authority, and

The National Information Technology Agency (NITA).

The Commission stated that the investigation will verify how patient data has been stored, processed, and protected, ensuring compliance with the Data Protection Act, 2012 (Act 843).

Specifically, the inquiry will assess:

Data storage and retention protocols used by Lightwave;

Compliance with legal standards for access control and security; and

Protection of data subject rights, including the right to privacy and lawful processing.

The DPC emphasised that it will engage all relevant stakeholders — including Lightwave eHealthCare Solutions and its local partners — to ensure a transparent and fair process.
The Commission further assured the public that it remains committed to safeguarding sensitive health information and upholding trust in Ghana’s digital health infrastructure.

The outcome of this investigation is expected to set a precedent for how data ownership and access are regulated in future public–private technology partnerships in Ghana’s health sector.