The regulator established by the Data Protection Act 2012 (Act 843).
It maintains the register of data controllers - any organisation processing personal data in Ghana is meant to be registered with it - and takes complaints from people whose data has been misused.
Two things worth knowing. Registration is a legal obligation for a business that holds customer data, including a small one, and it is widely ignored until somebody asks. And it is the body to complain to when a company will not tell you what it holds on you, keeps sending you messages you never consented to, or has leaked your details.