Spousal Privacy Breach — Reality or Myth?

A woman in Kumasi presses her sleeping husband's thumb to his phone and forwards three years of messages to her sister. A man in Tema, who works at a bank, quietly pulls his wife's account statement to see who has been sending her money. A husband in Accra installs a tracking app on the family car. Each of them will tell you they have done nothing wrong. In the eyes of the law, two of them may be right. One of them may have committed a criminal offence.

After a decade advising on privacy across the African continent, I can tell you that the question is not whether spousal privacy breaches are real. They are painfully real. The question is which ones the law will actually punish — and the answer surprises almost everyone, including lawyers.

“Marriage is the merger of two lives. It is not the erasure of two identities.”

Does a spouse have a reasonable expectation of privacy?

Yes — and the starting point is constitutional, not statutory. Article 18(2) of the 1992 Constitution of Ghana guarantees every person privacy of home, property, correspondence and communication. It contains no marital exception. Nowhere does Ghanaian law say that saying “I do” operates as blanket consent to be searched for the rest of your life.

But expectations of privacy are contextual, and marriage genuinely shifts the context. A shared laptop, a joint account, the family calendar, a household budget — these carry a low expectation of privacy, because the couple has pooled them. A personal phone, a private journal, medical records, communications with a doctor, counsellor, pastor or lawyer — these carry a high expectation, and marriage does not dissolve it. The relevant question is never simply “are we married?” It is “was this shared, and did they consent?”

The Uncomfortable Truth About Act 843

Here is where most commentary goes wrong. The Data Protection Act, 2012 (Act 843) contains a domestic purposes exemption (Section 67): personal data processed by an individual only for the purposes of that individual's personal, family or household affairs is exempt from the data protection principles.

Read plainly, that means a wife who scrolls through her husband's phone at home, and keeps what she finds to herself, is generally outside the reach of Act 843. The Data Protection Commission is a regulator of institutions. It is not a marriage tribunal, and it was never designed to be one. Filing a complaint with the DPC because your spouse read your texts will, in the ordinary case, go nowhere.

“Act 843 was written to regulate institutions, not to police bedrooms.”

This is why so many people conclude that spousal privacy breach is a myth. It is not. It is simply misfiled.

The Exemption is a Door, Not a Wall

The domestic exemption protects private curiosity. It collapses the moment the conduct stops being purely domestic — and in practice, it collapses constantly.

• When the information leaves the house. Screenshots posted to Facebook, forwarded to a WhatsApp group, or circulated to church members are no longer processing “only” for household affairs. The shield is gone.
• When a spouse uses professional access. This is the most serious category, and the one I have seen end careers. The banker who pulls his wife's statements, the nurse who opens her husband's file, the telecom employee who requests call records, the officer who runs a plate — none of them is acting for household purposes. They are processing their employer's data outside any lawful basis, breaching Sections 18, 19, 20 and 22 of Act 843, and exposing their employer, as data controller, to regulatory enforcement. Section 88 goes further: obtaining or disclosing personal data without the consent of the data controller is an offence.
• When third parties are enlisted. A private investigator, an IT technician, a spyware vendor, a friend at the hospital — each is a data controller or processor in their own right. None can hide behind your household exemption.

“The kitchen is exempt. The workplace never is.”

Where the Criminal Law is Waiting

Where Act 843 steps back, other statutes step forward — and they bite far harder. Under Section 67 of the Cybersecurity Act, 2020 (Act 1038), distributing an intimate image of an identifiable person without their consent, with intent to cause serious emotional distress, carries imprisonment of between one and three years. Section 68 criminalises merely threatening to distribute such material — the classic weapon of a collapsing marriage. Unauthorised access to a computer system is separately an offence.

Let me be blunt about this, because I have watched it destroy people: a marriage certificate is not a defence to a charge under Act 1038. Neither is provocation, infidelity, or a sense of grievance. The images you took together while in love do not become yours to publish when love ends.

“Revenge is not a defence. Neither is marriage.”

The Personal Space Every Spouse Keeps

Healthy marriages are transparent, not transparent-by-force. There is a private core that no spouse surrenders at the altar: health and mental health information; communications with a lawyer, doctor, counsellor or spiritual adviser; the confidences of friends and family shared in trust; and — critically — professional information a spouse is legally bound to protect. A doctor cannot discuss patients with a husband. A banker cannot discuss customers with a wife. Pressing a spouse to breach those duties is asking them to commit an offence on your behalf.

Before you open your partner's device, three questions are worth sitting with. Would I do this if they were awake and watching? Is there a less intrusive way to address what I actually fear? And what, precisely, will I do with what I find? If the honest answer to the third question involves an audience, you have left the domestic exemption behind.

The Consequences — Personal, Professional and Legal

The relational cost is obvious and rarely repaired: surveillance discovered is usually more damaging to a marriage than the suspicion that prompted it. The professional cost is underestimated. A spouse who misuses employer systems typically faces summary dismissal, professional disciplinary action, potential prosecution under Section 88 of Act 843, and personal liability — while the employer absorbs DPC enforcement for failing to control access. In litigation, Ghanaian courts have generally leaned toward admitting relevant evidence, but how it was obtained will colour how the court views the party who obtained it, and may itself become evidence of unreasonable behaviour.

What remedies actually exist

• Against an institution: complain to the Data Protection Commission, which may investigate and issue enforcement notices under the Act's enforcement provisions (Sections 75–81). This is the right route where a bank, hospital, school or telco allowed the access.
• For image-based abuse or hacking: report to the Police and the Cyber Security Authority under Act 1038. Preserve evidence; do not delete the threatening messages.
• Civil action: an injunction to restrain publication, and damages for breach of confidence or defamation, remain available and are often the fastest practical protection.
• Within the marriage: conduct of this kind is relevant to matrimonial proceedings, and mediation may address the underlying issue faster than any regulator.

So — Reality or Myth?
Reality. But not the reality most people imagine. In Ghana, the spouse who snoops privately usually escapes Act 843 through Section 67. The spouse who publishes, who weaponises intimate images, or who reaches into an employer's systems does not escape anything at all (Section 67 of Act 1038 applies) — and faces consequences considerably graver than a regulatory rebuke.

Data protection law, in the end, can only draw the outer boundary. It cannot manufacture trust inside a home. That work belongs to the couple.

“Trust is not surveillance that succeeded. It is surveillance you never needed.”

   Comments0