CSA sanctions ORC and Purpleline Solutions for cybersecurity violations

The Cyber Security Authority (CSA) has imposed fines on the Office of the Registrar of Companies and Purpleline Solutions Limited for breaching cybersecurity licensing regulations.

The sanctions were announced after the Authority found that both organisations had violated provisions of Ghana’s cybersecurity regulatory framework.

According to the CSA, the Office of the Registrar of Companies (ORC) engaged the services of an unlicensed cybersecurity service provider, while Purpleline Solutions Limited offered cybersecurity services without obtaining the required licence.

As a result, the ORC was fined GHC240,000, while Purpleline Solutions Limited was sanctioned with a GHC120,000 penalty.

The CSA said the enforcement action forms part of its ongoing efforts to ensure strict compliance with the Cybersecurity Act and related regulatory directives governing the provision of cybersecurity services in Ghana.

“The Authority remains committed to enforcing licensing requirements and ensuring that all entities operating within the cybersecurity ecosystem comply with established regulations,” the CSA stated.

The regulator emphasised that licensing requirements are intended to protect institutions, businesses and individuals by ensuring that cybersecurity service providers meet recognised professional and technical standards.

The Authority further urged public institutions and private organisations to verify the licensing status of cybersecurity service providers before engaging their services to avoid regulatory breaches and potential sanctions.