Ghana cloud warning starts fresh data debate as Sam George says foreign promises may be a mirage

Ghana's Minister for Communication, Digital Technology and Innovations, Sam Nartey George, has warned that promises made by foreign cloud companies about protecting local data may not be as solid as they sound.

Speaking at Joy News' Digital Economy Forum on AI and the Ghana Economy on Wednesday, 21 October 2026, he said many African companies are being sold a false sense of security. His comment is now driving a fresh Ghana data sovereignty debate.

## What Sam George actually warned about

In plain words, many businesses in Ghana store their data on foreign cloud platforms like Google Cloud and Amazon Web Services (AWS). When you sign up, they give you a contract that says your data is sovereign, it stays local, and it is protected.

Sam George said: “That is a mirage that is sold to many African companies, not just Ghanaian companies.”

He said he has had direct back and forth with Google and AWS where they give all kinds of agreements that say you are protected and data sovereign. His worry is not the paper, but the law behind it.

## Why the US CLOUD Act is at the centre

The minister pointed to the US CLOUD Act, an Act of Congress from 2018. The law allows the US government to order American tech companies to hand over data they hold, even if that data is stored outside the US.

His argument: “The U.S. Cloud Act is an act of Congress that supersedes any such arrangement that they may have with you as a private company.”

So in everyday money talk: even if your contract says your data stays in Ghana, if the company that holds it is American, an American court order could force them to release it. That private contract cannot override federal law.

## How health records made the warning bigger

Sam George linked the issue directly to health records. He said it is extremely important that Ghana begins to think about how it signs cloud agreements and how it uses those platforms, especially when it looks at what they try to do with health records.

This came as Ghana rejected a proposed US health compact. MyJoyOnline reported that Ghana rejected it after concerns about access to its pathogen profile, medical records, financing obligations and regulatory authority. President John Mahama said the terms included access to sensitive health data.

The warning also included everyday behaviour inside government. Sam George warned that some analysts are feeding sensitive memos into foreign AI chatbots like ChatGPT and Claude to summarize them. That alone could leak national data to servers abroad.

## Why businesses may care about this foreign cloud warning

If you run a hospital, bank, fintech, school or online store in Accra or Lagos, this matters for your business survival.

1. Your contract may not save you. You may be responsible under Ghana's Data Protection Act, while your cloud provider must obey US law. You are stuck in the middle.

2. Sensitive data costs more if it leaks. Health data, biometric ID, and KYC are classified as sensitive. A leak means loss of trust, lawsuits and fines from the Data Protection Commission.

3. You need to ask where your data sleeps. Many firms never ask: where is the server physically? Who has admin access? What happens during a foreign legal request? Sam George says ask before you sign, not after a breach.

## The bigger Africa data question

This is not just about Ghana. This is an Africa tech policy question for the whole continent.

Most African startups still run on foreign clouds because local alternatives are expensive and not yet at scale. Nigeria, Kenya and South Africa have data protection laws, but still host over 80% of their cloud workloads on US providers.

The bigger question is: can Africa talk about data sovereignty when the servers, the companies and the laws that control them are not African?

Ghana's response is to build local capacity. Government announced a $270 million AI plan — $250 million for a National AI Computing Centre and $20 million for an AI seed fund — and is pushing a local chatbot called Ghana Chat so public sector data can be processed locally instead of abroad.

For young businesses, the lesson from this foreign cloud warning is simple: the cloud has a country. And that country's law follows your data.

Photo suggestion: Data centre server racks or cloud graphic on stage at Joy News forum.