🇳🇵
Nepal
Privacy Act, 2018 (2075)
Asia🟡 Moderate
Compliance Score
14%
2 Addressed
9 Partial
3 None
Authority
Government bodies designated under the Privacy Act and related laws
Overview
Nepal's Privacy Act, 2018 protects privacy and regulates certain personal information and records. Its framework differs from a single comprehensive GDPR-style regime, and sector-specific laws may also apply.
14-Topic Coverage Analysis
Data Protection Authority
PartialConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
PartialBreach Notification
PartialDPO Requirements
PartialChildren's Data
PartialPenalties & Enforcement
PartialSector-Specific Rules
PartialCookie/Tracking
NoneAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Partial? Frequently Asked Questions
What is the primary data protection law in Nepal?+
Nepal is governed by the Privacy Act, 2018 (2075). The law is enforced by the Government bodies designated under the Privacy Act and related laws. According to our analysis, the country has a Moderate level of data protection framework.
Does Nepal require a Data Protection Officer (DPO)?+
Partially. The Privacy Act, 2018 (2075) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Nepal?+
Partially. While Privacy Act, 2018 (2075) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Nepal?+
The Privacy Act, 2018 (2075) has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.