Pakistan releases Draft Data Governance Policy 2026 for public input

Pakistan’s Ministry of Information Technology and Telecommunication has unveiled the draft Data Governance Policy 2026 and opened it for public comment. The ministry asks citizens to share their views by July 10, as the nation pushes forward with digital transformation.

Key principles of the draft

According to the proposal, government data will be treated as a strategic national asset held in trust for citizens. Consequently, public institutions will act as custodians, not owners, of this information. Moreover, the policy grants individuals the right to know who accessed their personal data, when it happened, and why, unless a legal exemption applies with a documented reason.

Citizens’ data rights

Furthermore, the draft permits people to receive their personal data in a structured, commonly used, machine‑readable format. Where feasible, individuals may also request direct transfers of their data between government bodies. In addition, agencies handling personal information must adopt privacy‑enhancing technologies and strengthen protection measures.

Implementation and scope

The Pakistan Digital Authority will oversee the rollout under the Digital Nation Pakistan Act 2025. The framework will cover federal ministries, departments, regulators, autonomous bodies, public‑sector companies, and private firms that manage government data on the federal government’s behalf. Meanwhile, provincial governments are encouraged to adopt comparable standards.

Legal safeguards

All public‑sector data processing must remain lawful, transparent, and aligned with privacy guarantees in Article 14 of Pakistan’s Constitution. The draft also adds tighter safeguards for sensitive personal information, stronger protection for children’s data, mandatory breach reporting, and strict rules on cross‑border data transfers. Once Pakistan passes a comprehensive personal data protection law, the government will revise the policy to match the new legal framework.