🇵🇰
Pakistan
Personal Data Protection Bill (PDPB)
Asia🟡 Moderate
Compliance Score
36%
5 Addressed
6 Partial
3 None
Authority
Ministry of IT and Telecommunication
Overview
Pakistan's PDPB is currently under consideration and is expected to establish a comprehensive framework for data protection. The law will create a Data Protection Authority and define obligations for data controllers.
14-Topic Coverage Analysis
Data Protection Authority
PartialConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
PartialBreach Notification
PartialDPO Requirements
PartialChildren's Data
PartialPenalties & Enforcement
AddressedSector-Specific Rules
NoneCookie/Tracking
NoneAI & Automated Decisions
NoneData Localisation
AddressedSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Pakistan?+
Pakistan is governed by the Personal Data Protection Bill (PDPB). The law is enforced by the Ministry of IT and Telecommunication. According to our analysis, the country has a Moderate level of data protection framework.
Does Pakistan require a Data Protection Officer (DPO)?+
Partially. The Personal Data Protection Bill (PDPB) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Pakistan?+
Yes, Pakistan has strict data localisation requirements. The Personal Data Protection Bill (PDPB) may require certain types of personal data to be stored within the country's borders.
What are the breach notification requirements in Pakistan?+
The Personal Data Protection Bill (PDPB) has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.