The Personal Data Protection Bill 2021 (PDPB) is a proposed law in Pakistan that aims to protect the privacy of personal data. The bill was introduced in the National Assembly of Pakistan in March 2021 and is currently under consideration.
The PDPB defines personal data as “any information relating to an identified or identifiable natural person”. It sets out a number of requirements for organizations that collect, use, or store personal data, including:
- Obtaining consent from the data subject before collecting or processing their personal data.
- Providing the data subject with access to their personal data and the right to have it corrected or deleted.
- Taking reasonable steps to protect personal data from unauthorized access, use, or disclosure.
The PDPB also establishes a Data Protection Authority (DPA) to oversee the implementation of the law. The DPA will have the power to investigate complaints, issue fines, and take other enforcement action.
The PDPB is a significant step forward for Pakistan in its efforts to protect the privacy of personal data. The bill, if enacted, will provide a comprehensive framework for the protection of personal data and will help to ensure that the privacy of Pakistanis is respected.
Here are some of the key features of the PDPB:
- The bill defines personal data and sets out a number of requirements for organizations that collect, use, or store personal data.
- The bill establishes a Data Protection Authority to oversee the implementation of the law.
- The bill gives data subjects the right to access their personal data, have it corrected or deleted, and object to its processing.
- The bill provides for enforcement mechanisms, including fines and imprisonment.
The PDPB is a comprehensive and ambitious law that has the potential to protect the privacy of Pakistanis. The bill is currently under consideration in the National Assembly of Pakistan and is expected to be enacted in the coming months.
