DLA Piper Intelligence

Data Protection
Laws of the World

Law

Pakistan
Pakistan

Pakistan has not enacted data protection legislation.

Last modified 15 Feb 2019
Law
Pakistan

Pakistan has not enacted data protection legislation.

Last modified 15 Feb 2019
Definitions

Definition of personal data

Not defined.

Definition of sensitive personal data

Not defined.

Last modified 15 Feb 2019
Authority

There is no national data protection authority in Pakistan.

Last modified 15 Feb 2019
Registration

There is no registration requirement.

Last modified 15 Feb 2019
Data Protection Officers

There is no requirement to appoint a data protection officer.

Last modified 15 Feb 2019
Collection & Processing

There are no restrictions on the collection and processing of personal data.

Last modified 15 Feb 2019
Transfer

Pakistan does not specifically regulate data transfers, however, limitations apply.

Pakistan prohibits data transfers to any country that it does not recognize, including: Israel, Taiwan, Somaliland, Nagorno Karabakh, Transnistria, Abkhazia, Northern Cyprus, Sahrawi Arab Democratic Republic, South Ossetia and Armenia. This list may change from time to time. Additionally, data transfers to India must be justifiable by the transferor.

Data collated by banks, insurance firms, hospitals, defense establishments and other ‘sensitive’ institutions may not be transferred to any individual or body without authorization from the relevant regulator on a confidential basis. Such data is further regulated by contractual terms. In certain cases, data may not be transferred without authorization from the data subject.

However, banks and financial institutions must maintain confidentiality in banking transactions.

Last modified 15 Feb 2019
Security

There are no data security requirements.

Last modified 15 Feb 2019
Breach Notification

There is no requirement to report data breaches to any individual or regulatory body.

Last modified 15 Feb 2019
Enforcement

There is no enforcement mechanism. Appropriate relief may be sought through courts of law having jurisdiction in the matter.

Last modified 15 Feb 2019
Electronic Marketing

There is no electronic marketing regulation in Pakistan. Note that an earlier law promulgated in this regard has since lapsed.

Last modified 15 Feb 2019
Online Privacy

There is no specific law that regulates the manner in which individuals private data may be stored or transmitted online.

The Prevention of Electronic Crimes Act, 2016 criminalizes unauthorized: access to information systems or data, copying or transmission of data and use of identity information. The Act further criminalizes "offenses against the dignity of a natural person," including the transmission of information through an information system which "harms the reputation or privacy of a natural person."

Last modified 15 Feb 2019
Contacts
Darakhshan Sheikh Vohra
Darakhshan Sheikh Vohra
Partner
T +9221 3583 5101 – 104
Ali Qaisar
Ali Qaisar
Associate
T +9221 3583 5101-104
Last modified 15 Feb 2019