Status
Bill pending
Consent model
None
Primary law
Personal Data Protection Bill (pending); PECA 2016 covers cyber offenses
Year
n/a
Authority
None yet (bill proposes a National Commission for Personal Data Protection)
Marketing consent
No comprehensive consent requirement today; sectoral rules (banking, telecom) impose confidentiality duties.
Transfers
No general regime; the draft bill proposes localization for critical data.
Penalties
No penalties apply under a general privacy law.
The framework
No comprehensive data protection statute applies in Pakistan today.
With no local consent rule, platform policies and the extraterritorial reach of laws like the GDPR govern campaigns here in practice.
Marketing and advertising
No comprehensive consent requirement today; sectoral rules (banking, telecom) impose confidentiality duties. With no operative local consent rule, the practical guardrails are platform policy and any foreign law that can reach the campaign.
Cross-border transfers
No general regime; the draft bill proposes localization for critical data.
Enforcement and penalties
No penalties apply under a general privacy law.
Cite this page: "Pakistan Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/pakistan.html. Accessed [date].