Law: There is no general personal data protection law.
Regulator: There is no general data protection authority.
Summary: There is no general personal data protection law. The Prevention of Electronic Crimes Act, 2016 ('PECA') is currently the primary legislation that provides a legal framework in relation to various kinds of electronic crimes and also extends to the unauthorised access to personal data. The Ministry of Information Technology and Telecommunication ('MITT') has published several consultation drafts for a data protection bill. The most recent draft, the Personal Data Protection Bill, 2023 ('the Bill'), was released in May 2023. Notably, the MITT published its Pakistan Cloud First Policy on 18 February 2022, outlining guidelines and solutions for cloud services