ISLAMABAD

The federal government has proposed strict new controls on the cross-border transfer of government data, making national sovereignty and security the primary conditions under Pakistan’s proposed National Data Governance Policy.

According to the policy framework, public sector organizations will be required to classify government data based on its sensitivity before any information can be transferred outside the country.

The proposed policy bars the transfer of sensitive and critical government data abroad without prior approval and compliance with prescribed legal and security requirements.

A formal authorization mechanism has been introduced for cross-border government data transfers, with institutions required to demonstrate adherence to national laws, cybersecurity standards and data protection safeguards.

The policy emphasizes that Pakistan will retain sovereign control over government data at all times, even when information is processed or stored beyond national borders under approved arrangements.

Officials say the new framework is designed to prevent unauthorized foreign access to sensitive government information while strengthening national cybersecurity and digital resilience.

The proposed policy also assigns the Pakistan Digital Authority a leading role in promoting international cooperation on data governance while ensuring that cross-border data sharing remains aligned with Pakistan’s national interests.

Authorities say the framework seeks to balance global digital collaboration with robust safeguards for national security, data sovereignty and public sector accountability.

The move comes as governments worldwide tighten regulations on data localization and cross-border data flows amid growing concerns over cybersecurity, digital sovereignty and protection of critical national information infrastructure.