ISLAMABAD – Imagine being able to ask the government who accessed my personal information, and why? The answer was largely out of reach until now, as Pakistan is set to change rules with new National Data Governance Policy that promises transparency, stronger privacy protections, and, for the first time, gives citizens the right to see how their personal data is being used across government institutions.
A new National Data Governance Policy that recognizes government-held data as national asset while granting citizens unprecedented rights over their personal information. Ministry of Information Technology and Telecommunication, the policy introduces a nationwide framework for the collection, storage, sharing, protection, and disposal of government data. It applies to all federal ministries, departments, statutory bodies, public-sector organizations, and private contractors or partners handling government information.
One of key features of policy is expansion of citizens’ rights over the personal data maintained by government institutions. For the first time, individuals will have the right to know what personal information is held about them, who has accessed their records, when the access occurred, and the reason behind it.
Citizens will also be able to request corrections to inaccurate or incomplete records, seek removal of personal data in specified circumstances, and get their information in machine-readable formats. The government agencies will be required to establish accessible complaint and redress mechanisms to address data-related grievances.
The policy is a shift in government’s approach to public data. Rather than treating information as property of individual departments, it defines government institutions as custodians responsible for safeguarding data on behalf of citizens. Agencies will be required to ensure data accuracy, maintain strong security standards, process information lawfully, and enable controlled data sharing across the public sector.
Under new framework, citizens should not have to repeatedly submit the same information to different government departments if it is already available through authorized government systems. The measure is expected to streamline public services and reduce administrative delays.
The policy strengthens privacy protections by requiring that consent for processing personal data be specific, informed, and capable of being withdrawn. It provides additional safeguards for sensitive personal information and children’s data while making privacy-by-design a mandatory requirement in the development of government digital systems and services.
Implementation of the policy will be overseen by the Pakistan Digital Authority, which will establish a National Data Governance Council to coordinate implementation and monitor compliance across federal institutions.
Further details about the mechanism of new right to access data is yet to be shared with masses.
Is it still safe to Book Hotels on Booking.com after Users’ Data Leak?
