DATA PROTECTION
LAWS OF THE WORLD
Pakistan
Downloaded: 13 October 2019
DATA PROTECTION LAWS OF THE WORLD
PAKISTAN
Last modified 15 February 2019
LAW
Pakistan has not enacted data protection legislation.
DEFINITIONS
Definition of personal data
Not defined.
Definition of sensitive personal data
Not defined.
NATIONAL DATA PROTECTION AUTHORITY
There is no national data protection authority in Pakistan.
REGISTRATION
There is no registration requirement.
DATA PROTECTION OFFICERS
There is no requirement to appoint a data protection officer.
COLLECTION & PROCESSING
There are no restrictions on the collection and processing of personal data.
TRANSFER
Pakistan does not specifically regulate data transfers, however, limitations apply.
Pakistan prohibits data transfers to any country that it does not recognize, including: Israel, Taiwan, Somaliland, Nagorno
Karabakh, Transnistria, Abkhazia, Northern Cyprus, Sahrawi Arab Democratic Republic, South Ossetia and Armenia. This list may
change from time to time. Additionally, data transfers to India must be justifiable by the transferor.
Data collated by banks, insurance firms, hospitals, defense establishments and other ‘sensitive’ institutions may not be transferred
to any individual or body without authorization from the relevant regulator on a confidential basis. Such data is further regulated
by contractual terms. In certain cases, data may not be transferred without authorization from the data subject.
2 | Data Protection Laws of the World | Pakistan | www.dlapiperdataprotection.com
DATA PROTECTION LAWS OF THE WORLD
However, banks and financial institutions must maintain confidentiality in banking transactions.
SECURITY
There are no data security requirements.
BREACH NOTIFICATION
There is no requirement to report data breaches to any individual or regulatory body.
ENFORCEMENT
There is no enforcement mechanism. Appropriate relief may be sought through courts of law having jurisdiction in the matter.
ELECTRONIC MARKETING
There is no electronic marketing regulation in Pakistan. Note that an earlier law promulgated in this regard has since lapsed.
ONLINE PRIVACY
There is no specific law that regulates the manner in which individuals private data may be stored or transmitted online.
The Prevention of Electronic Crimes Act, 2016 criminalizes unauthorized: access to information systems or data, copying or
transmission of data and use of identity information. The Act further criminalizes "offenses against the dignity of a natural person,"
including the transmission of information through an information system which "harms the reputation or privacy of a natural
person."
KEY CONTACTS
LMA Ebrahim Hosain
www.lma-eh.com
Darakhshan Sheikh Vohra
Partner
LMA Ebrahim Hosain
T +9221 3583 5101 – 104
[email protected] Ali Qaisar
Associate
LMA Ebrahim Hosain
T +9221 3583 5101-104
[email protected]
DATA PRIVACY TOOL
You may also be interested in our Data Privacy Scorebox to assess your organization's level of data protection maturity.
3 | Data Protection Laws of the World | Pakistan | www.dlapiperdataprotection.com
DATA PROTECTION LAWS OF THE WORLD
Disclaimer
DLA Piper is a global law firm operating through various separate and distinct legal entities. Further details of these entities can be
found at www.dlapiper.com.
This publication is intended as a general overview and discussion of the subjects dealt with, and does not create a lawyer-client
relationship. It is not intended to be, and should not be used as, a substitute for taking legal advice in any specific situation. DLA
Piper will accept no responsibility for any actions taken or not taken on the basis of this publication.
This may qualify as 'Lawyer Advertising' requiring notice in some jurisdictions. Prior results do not guarantee a similar outcome.
Copyright © 2017 DLA Piper. All rights reserved.
