By Abubakari Saddiq Adams
The role of technology in governance has never been more crucial than in today’s digital age, where effective communication and secure data management form the backbone of public administration.
However, recent revelations about certain government practices have raised significant concerns and sparked widespread public and legal debate.
Reports suggested that official government websites had been redirected to personal domains, government officials have been using personal emails for official communications, and personal devices have been employed for conducting government business all without the guidance of clear, robust policies.
Such practices raise serious questions about governance, security, and ethics. Government websites are public resources meant to provide transparent, accurate, and up-to-date information to citizens.
Redirecting these websites to personal domains not only undermines public trust but also disrupts access to vital information.
Similarly, the use of personal emails and devices introduces a plethora of risks, from data breaches and loss of confidentiality to violations of data protection laws, such as Ghana’s Data Protection Act.
The ethical implications of these actions cannot be overlooked. Citizens expect public officials to uphold the highest standards of professionalism and integrity, ensuring a clear separation between their personal and official capacities.
When these boundaries blur, it does not only jeopardize security but also erodes the public confidence in the government’s ability to safeguard their interests.
This article explores into the far-reaching implications of these practices, examining the potential risks they pose to governance, accountability, and national security.
Additionally, it offers practical solutions aimed at addressing these challenges while drawing critical lessons for Ghana as it continues to pursue its digital transformation agenda.
By implementing clear policies, strengthening oversight, and fostering a culture of transparency and ethical conduct, Ghana can reinforce the trust and confidence of its citizens, ensuring a more secure and accountable governance framework for the future.
Breach of Public Trust
One of the most alarming allegations involves the redirection of official government websites to personal domains.
Official websites are public resources designed to disseminate accurate, up-to-date information about government operations and services. Redirecting these resources undermines the principles of transparency and accountability.
Such actions not only disrupt public access to critical information but also give rise to perceptions of abuse of power.
Citizens expect government communications to remain within secure and trusted channels, and deviations from this standard erode the trust placed in public institutions.
Confidentiality and Security Risks
The use of personal devices and emails for government business significantly increases the risk of data breaches and cybersecurity threats:
Data Exposure: Personal devices and email accounts lack the stringent security protocols of government-managed systems. This increases the likelihood of sensitive information falling into the wrong hands through hacking, phishing, or other cyber threats.
Inadequate Encryption: Government communications often involve classified or sensitive data that must be encrypted. Personal platforms might not provide this level of protection, leaving critical data exposed to unauthorized access.
Cross-Border Risks: Emails sent via personal platforms could be stored on servers located outside Ghana, violating local data sovereignty laws and exposing the country to international data security risks.
Non-compliance with Ghana’s Data Protection Act
The Data Protection Act (DPA) of Ghana mandates that all entities handling personal data adhere to strict regulations to safeguard privacy. Using personal platforms for official government business can easily lead to violations, including:
Improper Data Storage: Government data stored on personal devices may not meet the DPA’s storage and security standards.
Consent Violations: Handling personal data through unsecured channels could breach requirements for informed consent and privacy.
Legal Repercussions: Non-compliance with the DPA exposes the government to lawsuits, fines, and reputational damage.
Accountability and Transparency at Risk
Transparency and accountability are cornerstones of good governance. When personal platforms are used for official purposes, these principles are compromised:
Lost Records: Personal devices and email accounts may lack proper archival systems, leading to the loss of important records.
Public Scrutiny: Official communications conducted outside government systems are harder to audit, creating obstacles for public accountability and historical documentation.
Freedom of Information Challenges: Requests under Ghana’s Right to Information Act may be difficult to fulfill if relevant data resides on personal platforms.
Ethical Concerns and Public Perception
Public officials are expected to maintain high ethical standards, including the clear separation of personal and professional responsibilities.
Mixing personal platforms with government operations can lead to conflicts of interest and perceptions of corruption. Redirecting official resources to personal use is not only unethical but also undermines the credibility of public officeholders.
Practical Solutions to Address the Challenges
To address these challenges effectively, the following solutions are recommended:
. Develop and Implement Comprehensive Policies
Government must establish clear policies for IT governance practices. These policies should include:
Device Use Policy: Define rules for personal and government-issued devices, ensuring security protocols are followed.
Email Policy: Mandate the use of secure, official email systems for all government communications.
Transition to Secure Government Platforms
All government operations and communications should be conducted on secure, government-controlled platforms. Official websites must remain under government management to ensure trust and reliability.
Invest in Cybersecurity Training
Public officials should be trained in cybersecurity best practices, including:
- Identifying phishing attempts.
- Using encrypted communication channels.
- Complying with local and international information security and data protection regulations.
Mandate the Use of Government-issued Devices
Providing secure, government-issued devices ensures better control over sensitive information. These devices should be equipped with:
- Multi-factor authentication (MFA)
- Endpoint detection and response (EDR) systems
- Automatic data backup solutions
Enhance Oversight and Accountability
An independent oversight body should monitor compliance with these policies through:
Audits: Regular reviews of email and device usage to identify and address violations.
Penalties: Strict enforcement of penalties for non-compliance, including fines and suspension.
Promote Public Transparency
Government should adopt measures to enhance transparency, such as:
- Publishing annual reports on cybersecurity and communication practices.
- Creating feedback channels for citizens to report concerns about misuse of government resources.
Conclusion
The allegations of redirecting official websites, using personal emails, and relying on personal devices without proper oversight highlight a critical need for reform in IT governance practices. These actions not only jeopardize security but also erode public trust and accountability.
As Ghana continues to advance its digitalization agenda, it must prioritize robust policies, cybersecurity measures, and ethical governance to safeguard public resources and ensure transparency.
Addressing these challenges effectively will reinforce the principles of accountability and trust that are vital for national progress.
Abubakari is a Business IT & IT Legal Consultant with a focus on IT governance and cybersecurity. Member, IIPGH
+233246173369 | [email protected]