Investigator Petitions President Over Alleged Medical Data Leak at Three Accra Health Facilities

An investigator has petitioned President John Dramani Mahama to order an inquiry into an alleged large-scale leak of patient data at three private health institutions in Accra: Accra Medical Centre, Sunshine Healthcare Centre and Medylife Healthcare, according to Africa Today News (19 October 2026).

The petition says the facilities exposed sensitive medical records. [Name of investigator] says [describe what was allegedly exposed, such as lab results, imaging or patient identities, and how it was discovered]. None of these allegations has been independently verified, and the facilities have not publicly responded in the material available to this writer.

The claim, if proven, is serious. Medical data is among the most sensitive information a person can hold. Exposure can lead to stigma, discrimination, blackmail and loss of trust in the health system, especially for patients with conditions that carry social stigma.

Under Ghana's Data Protection Act, 2012 (Act 843), organisations that handle personal data must protect it, and the Data Protection Commission is the regulator. Operators are generally expected to notify the Commission when a breach occurs. This is general background and not a finding about these three facilities.

There is also a wider context. The government has been vocal about health data protection. Last month, Mahama explained that Ghana's Cabinet rejected a proposed US health compact over concerns about sensitive health information, counterpart funding and the inspection of medical products.

If the state objects to handing over medical records to a foreign government, it should apply the same scrutiny when private providers are accused of leaking them.

Four questions need answers:
What leaked, and how many people are affected? The petitioner should provide evidence to the right authorities.

Did the facilities detect and report a breach? The Data Protection Commission should say whether it has received notifications.

Have patients been told? People whose records were exposed have a right to know.

Who investigates? The President can direct an inquiry, but the Data Protection Commission and the Ministry of Health already have statutory roles.

Until the facts are established, these remain allegations. The three institutions deserve a fair chance to respond, and patients deserve a clear answer.

Mustapha Bature Sallama
Medical/Science communicator, Private Investigator, Criminal Investigation and Intelligence Analysis,United States Institute of Peace (USIP), [email protected] +233555275880.

Source: Africa Today News, 19 October 2026, front page.