The Ministry of Information Technology and Telecommunication has released the draft National Data Governance Policy 2026 for public consultation, declaring government-held data a strategic national asset to be held in trust for citizens rather than treated as departmental property, and granting Pakistanis unprecedented rights over their personal information held across federal public institutions. The draft policy has been placed on the ministry’s website for public comments until July 10, and states that while it serves as the primary national framework for data governance, it does not cover personal data held outside the public sector, primary legislation, judicial proceedings, or matters falling within specific national security, defence, parliamentary or judicial domains.
One of the biggest changes introduced by the policy is a new set of rights for citizens regarding their personal data. Citizens will have the right to know what personal information the government holds about them, who accessed their data, when the access occurred, and the reason for it. People will also be able to request corrections to inaccurate or incomplete records, ask for their personal data to be deleted in specified circumstances, and obtain their information in structured, machine-readable formats. This right shall not be denied except on narrow grounds expressly provided by law, with reasons recorded. Citizens will also be able to obtain their personal data in a structured, commonly used and machine-readable format, and have such data transmitted directly between public bodies where technically and legally feasible. Government agencies will be required to establish accessible complaint and redress mechanisms for citizens.
The policy strengthens privacy protections by requiring that consent for processing personal data be specific, informed, and capable of being withdrawn. It provides additional safeguards for sensitive personal information and children’s data while making privacy-by-design a mandatory requirement in the development of government digital systems and services. Sensitive personal data will be subject to enhanced safeguards including stricter access controls, mandatory encryption, shorter retention periods, explicit lawful basis, and enhanced audit requirements. Children’s data will receive additional protection through age-appropriate notices, restrictions on profiling and behavioural advertising, and parental or guardian involvement where required. Public bodies will be required to notify the Pakistan Digital Authority without undue delay in the event of a personal data breach, and where a breach poses a high risk to individuals’ rights and freedoms, affected citizens must also be informed.
The Pakistan Digital Authority will serve as the national authority responsible for issuance, oversight, and implementation of the policy. PDA will develop standards, oversee their implementation, and ensure federal public bodies comply with the national data governance framework, with the power to issue binding directions to ministries, departments, and public sector organisations. The authority will also manage the National Open Data Portal, oversee the National Data Exchange known as WASL, maintain the National Data Catalogue, and conduct regular audits. Every federal public body will be required to appoint an Agency Chief Data Officer responsible for implementing the policy within their organisation, maintaining data inventories, ensuring lawful data use, and reporting compliance status and security incidents to PDA. The policy also proposes the formation of a National Data Governance Council under PDA’s chairmanship, including representatives from federal and provincial governments, sector regulators, and other stakeholders, to serve as the country’s highest coordination forum for data governance. Citizens and stakeholders can submit their comments on the draft policy through the ministry’s website before the July 10 consultation deadline.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
