(4) Notwithstanding provisions of any other law, the Federal Government shall make rules for
appointment and promotion in the investigation agency including undertaking of specialized courses
in digital forensics, information technology, computer science and other related matters for training of
the officers and staff of the investigation agency.
30. Power to investigate.— Only an authorized officer of the investigation agency shall have the
powers to investigate an offence under this Act:
Provided that the Federal Government or the Provincial Government may, as the case may be,
constitute one or more joint investigation teams comprising of an authorized officer of the
investigation agency and any other law enforcement agency for investigation of an offence under this
Act and any other law for the time being in force.
31. Expedited preservation and acquisition of data.— (1) If an authorised officer is satisfied
that—
(a) specific data stored in any information system or by means of an information system is
reasonably required for the purposes of a criminal investigation; and
(b) there is a risk or vulnerability that the data may be modified, lost, destroyed or rendered
inaccessible, the authorized officer may,
by written notice given to the person in control of the information system, require that
person to provide that data or to ensure that the data specified in the notice be preserved
and the integrity thereof is maintained for a period not exceeding ninety days as specified
in the notice:
Provided that the authorized officer shall immediately but not later than twentyfour hours bring
to the notice of the Court, the fact of acquisition of such data and the Court on receipt of such
information may pass such orders as deemed appropriate in the circumstances of the case including
issuance of warrants for retention of such data or otherwise.
(2) The period provided in subsection (1) for preservation of data may be extended by the Court
if so deemed necessary upon receipt of an application from the authorized officer in this behalf
32. Retention of traffic data.—(1) A service provider shall, within its existing or required
technical capability, retain its specified traffic data for a minimum period of one year or such period
as the Authority may notify from time to time and, subject to production of a warrant issued by the
Court, provide that data to the investigation agency or the authorized officer whenever so required.
(2) The service providers shall retain the traffic data under subsection (1) by fulfilling all the
requirements of data retention and its originality as provided under sections 5 and 6 of the Electronic
Transactions Ordinance, 2002 (LI of 2002).
(3) Any owner of the information system who is not a licensee of the Authority and violates sub
section (1) shall be guilty of an offence punishable, if committed for the first time, with fine which
may extend to ten million rupees and upon any subsequent conviction shall be punishable with
imprisonment which may extend to six months or with fine or with both:
Page 13 of 25