Arnold Kavaarpuo, executive director of Ghana’s Data Protection Commission, said the scope of data access requested “went far beyond what would typically be required for the purpose for which it’s stated.”