Pakistan’s New Digital Authority Could Soon Gain Massive Govt Powers

The Pakistan Digital Authority (PDA) is set to become the country’s most powerful digital governance institution under the proposed National Data Governance Policy 2026, with broad powers to regulate, monitor, and enforce data governance standards across federal public bodies.

Prepared by the Ministry of Information Technology and Telecommunication, the proposed policy designates the PDA as the national authority responsible for issuing standards, overseeing implementation, and ensuring compliance with data governance requirements across the federal government.

According to the policy document, the PDA will have the authority to issue binding directions to ministries, departments, and public-sector entities to ensure compliance with the national data governance framework.

The authority will also oversee the National Open Data Portal, supervise the National Data Exchange (WASL), maintain the National Data Catalogue, and conduct periodic audits to assess whether public bodies are complying with data governance standards.

Under the proposed framework, every federal public body will be required to appoint an Agency Chief Data Officer (CDO). The CDO will be responsible for implementing the policy, maintaining data inventories, ensuring the lawful use of data, and reporting incidents and compliance status to the PDA.

The policy also proposes the creation of a National Data Governance Council, which will be chaired by the PDA. The council will include representatives from the federal and provincial governments, sectoral regulators, and other stakeholders, and will serve as the country’s highest forum for coordinating and harmonising data governance.

In addition, the PDA will establish and publish a National Data Maturity Index to assess data governance standards across public bodies. The results will be published annually and used to guide corrective actions and set future priorities.

The proposed framework also empowers the authority to conduct audits, require corrective actions, and enforce compliance through binding directions. Persistent non-compliance by public bodies could result in enforcement action under applicable laws.

The policy notes, however, that while the PDA will govern public-sector data as a national asset, responsibility for protecting personal data rights will remain with the authority designated under Pakistan’s future personal data protection law.

The proposed National Data Governance Policy 2026 is expected to take effect after receiving Cabinet approval and publication in the official Gazette.