Pakistan unveils draft data governance policy, declares data a national asset

Pakistan's Ministry of Information Technology and Telecommunication has unveiled a draft Data Governance Policy 2026, proposing to classify government data as a strategic national asset entrusted to citizens. The policy, open for public feedback until July 10, aims to establish a national framework for data governance, focusing on sovereignty, public value, citizen empowerment, and lawful use.

The draft policy clarifies that public bodies are custodians, not owners, of government data. It introduces a significant right for citizens to know precisely who has accessed their personal data, when, and for what purpose, with exceptions only allowed on narrow legal grounds. Public bodies processing personal data will be mandated to use Privacy-Enhancing Technologies and adhere to Privacy by Design principles.

“

data protection and usage regulations had become essential with the rapid growth of digitisation.

Citizens will also gain the right to access their personal data in a structured, machine-readable format, and to have it transmitted between public bodies where feasible and legal. The proposed framework designates the Pakistan Digital Authority as the national oversight body. It also stipulates that government data will remain under Pakistan's lawful authority, with cross-border transfers permitted only under strict governance and with adequate safeguards. The policy applies to all federal ministries, departments, and public-sector entities under federal jurisdiction.

“

This right shall not be denied except on narrow grounds expressly provided by law, with reasons recorded.