NADRA to Lead Citizen Data Protection Amid Absence of Privacy Law

ISLAMABAD

Pakistan has assigned the National Database and Registration Authority (NADRA) a central role in safeguarding citizens’ data, as the country continues to operate without a comprehensive privacy law.

The move comes amid rising concerns over data security as digital services expand across the country. Officials say NADRA will oversee efforts to protect sensitive personal information until a formal legal framework is introduced.

Under the proposed system, strict penalties are expected for unauthorised access, misuse, or leakage of citizen data, reflecting growing urgency to address cybersecurity risks.

NADRA already manages Pakistan’s national identity database, making it a key institution in handling sensitive information. However, experts have long warned that the absence of a dedicated privacy law creates gaps in accountability and enforcement.

Analysts say assigning NADRA a leading role may improve coordination, but stress that a clear and independent data protection law is essential to ensure transparency, safeguard privacy rights, and build public trust.