Data Protection Commission probes Lightwave over patient records

The Data Protection Commission (DPC) has launched an investigation into access to patient data managed by Lightwave eHealthCare Solutions under its previous contract with the Ministry of Health for the National Electronic Medical Records and Patient Management System.

This follows ongoing tensions over the Lightwave Health Information Management System (LHIMS), which the Minister of Health, Kwabena Mintah Akandoh, has accused the vendor of deliberately shutting down due to disagreements over a new maintenance agreement.

According to Akandoh, the government had insisted that the vendor hand over all patient data and grant full administrative access to the state before the signing of a new service agreement. The vendor reportedly refused, leading to the system shutdown that has disrupted hospital operations nationwide.

In a statement issued on Wednesday, October 29, the Data Protection Commission said the investigation is being conducted under the supervision of the Minister of Communication, Digital Technology and Innovation, and in collaboration with the Ministry of Health, the Cyber Security Authority, and the National Information Technology Agency (NITA).

The Commission explained that the probe aims to ensure that personal health data is being handled securely and in full compliance with the Data Protection Act, 2012 (Act 843).

The scope of the investigation, it said, will include assessing how patient data is stored and managed, verifying compliance with legal requirements for data processing, retention, and security, and ensuring that the rights of data subjects are protected.

The DPC added that it will engage all relevant parties — including Lightwave eHealthCare Solutions and its partners — while maintaining transparency and following due process.

It further assured the public of its commitment to protecting sensitive health information and maintaining trust in Ghana’s digital systems.

Read also