Art. 25 of Law 4412/2016, which regulates public procurement in Greece, provides that participation in public procurement is reserved for local, EU and European Economic Area (EEA) companies and for companies from third countries that are parties to a relevant treaty with Greece or have ratified the WTO Government Procurement Agreement.

Art. 85 of the Utilities Directive (2014/25/EU) contains provisions allowing contracting public entities to reject foreign goods not covered by any EU international commitments from its tender procedures. In these cases, a tender submitted for the award of a supply contract may be rejected where the proportion of the products originating in third countries exceeds 50% of the total value of the products constituting the tender (Art. 85.2). Additionally, in cases of equivalent offers, the provisions provide for a preference for European tenders and tenders covered by EU's international obligations. In practice, this possibility has rarely been used.
In Greece, the Directive has been transposed with Law No. 4412-Public Works contracts, procurement contracts and Services (adaptation to Directives 2014/24/ OJ and 2014/25/EU).

The Ghana Standards Authority (GSA), under the Standards Authority Act, 1973, is responsible for conducting conformity assessment activities. The Product Certification Department offers assessment and impartial third-party attestation to confirm that specified requirements have been met. These requirements are typically outlined in standards or other normative documents. Product certification is carried out by certification bodies, which must adhere to ISO IEC 17065.
When telecom equipment dealers import ICT devices into Ghana, they are required to declare the shipment details to the National Communications Authority (NCA) through the Customs system. The NCA then conducts a physical inspection at the ports of entry to ensure that the devices are Type Approved. To facilitate this process, the NCA has established NCA Approval Testing Labs, which include laboratories for Specific Absorption Rate (SAR), Electromagnetic Field (EMF) measurements, Digital Terrestrial Television (DTT), and Radio Frequency and Signalling (RF & Sig) testing.

The law prohibits the sale or provision of encryption or authentication services unless it is compliant with the country’s 2008 Electronic Transactions Act. The National Information Technology Agency is charged with certifying and issuing licenses for encryption and authentication services. Law enforcement officers are also entitled to require access to decryption information and “the reasonable technical and other assistance required for investigation or prosecution”.

It is reported that the de minimis threshold, that is the minimum value of goods below which customs do not charge duties, is GHS 3,200 (approx. 200 USD).

According to the guidelines for registering domains under the GH2-DOM, for the registration of a ".gh" domain name, the domain administrator must be located in Ghana, and the domain administrator's company should have been registered in Ghana. In addition, domain names registered under the top-level .gh domains should be active within six months after registration.

The Electronic Transactions Act 2008 provides a comprehensive consumer protection framework that applies to online transactions.

Ghana has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Ghana has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Ghana has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

The Electronic Transactions Act establishes a safe harbour regime for intermediaries beyond copyright infringements. Sections 90-95 of the Electronic Transactions Act provide a framework that does not make intermediaries and service providers liable for data transmission, routing, or storage of electronic records. Intermediaries are not liable for the information stored on their systems “at the request of recipients of their services” on condition that they do not “have actual knowledge that the information or an activity relating to the information is infringing the rights of a third party (a person or the state),” are not aware of the circumstances surrounding the infringement and takes steps to make the information inaccessible upon a take-down notification.

The Subscriber Identity Module Registration Regulations 2011 mandates telecom network operators to register subscribers. In addition, Section 7(1)(l) of the National Identity Register Regulations 2012 made the National ID card the mandatory identification document for the registration of SIM cards. Use of National ID is applicable to individuals who qualify for citizen and non-citizen National ID Cards; for non-citizens, a valid passport is required.

Section 27 of the Data Protection Act provides that a data controller who intends to process personal data must register with the Data Protection Commission (DPC). The application must be made in writing and must contain (Section 47.1):
- the business name and address of the applicant;
- the name and address of the company's representative where the company is an external company;
- a description of the personal data to be processed and the category of persons whose personal data are to be collected;
- an indication as to whether the applicant holds or is likely to hold special personal data;
- a description of the purpose for which the personal data is being or is to be processed;
- a description of a recipient to whom the applicant intends to disclose the personal data;
- the name or description of the country to which the applicant may transfer the data;
- the class of persons or, where practicable, the names of persons whose personal data is held by the applicant;
- a general description of measures to be taken to secure the data; and
- any other information that the DPC may require.
If the data controller intends to keep personal data for two or more purposes, it has to make separate applications for each purpose. Art. 50 stipulates that a registration shall be renewed every two years.