New Data Policy Restricts Foreign Access to Sensitive Govt Information

Pakistan has introduced stricter controls on the cross-border transfer of government data under its National Data Governance Policy, strengthening safeguards to prevent unauthorized foreign access to sensitive public sector information.

The policy establishes a framework that governs where government data can be stored, processed, and transferred. It places a strong emphasis on protecting national sovereignty, security, and control over official information.

Under the new framework, public sector institutions must classify government data based on its level of sensitivity before deciding whether it can be hosted or transferred outside Pakistan. Sensitive and critical government data will be subject to data residency requirements and may only be transferred overseas under prescribed conditions and after obtaining the required approvals.

The policy also introduces a Sovereignty, Residency and Cross-Border Controls Profile that will define data residency tiers, hosting requirements, jurisdictional safeguards, and approval mechanisms for cross border data transfers.

Government organizations will be required to ensure that any overseas processing of official data complies with Pakistan’s laws and does not compromise national control over public sector information.

Additionally, the Pakistan Digital Authority will work with international counterparts, multilateral organizations, and standards bodies to promote responsible cross border data governance while safeguarding Pakistan’s national interests. The policy aims to support lawful international cooperation without weakening protections for government held data.