STATEMENT OF OBJECTIVES
The right to privacy enshrined in the Constitution of Pakistan is a fundamental right of a
person. It emanates that every citizen has a right to the protection of personal data which is an
indispensable aspect of informational privacy.
This Bill is to lay out the modus operandi and ancillary details for the usage of personal data
such as processing, collection, storage, and disclosure by government, organisations, and
individuals for processing purposes because of necessary care, and obligations enunciated in
this Bill. It nourishes the environment of fair practices in the digital economy by offering legal
protections in online transactions and sharing of personal and sensitive information or data for
personal, international e-commerce, and e-government services.
Keeping in view potential approaches, the Personal Data Protection Bill, of 2023 is enacted
in line with a present patchwork of global and regional legislations on the protection of
personal data to match common grounds and identify areas where different approaches tend
to diverge. Rapid technological advancement and enhanced use of internet services have
digitised a wide range of economic, political, and social activities that are having a
transformational impact on the way businesses were conducted, and the interaction of people
amongst themselves, as well as with the government, enterprises, and other stakeholders.
As early adopters of emerging technologies, children are also affected by the risks of the
digital world, given their developmental vulnerabilities as they are “canaries in the coal mine
for threats to us all.” Therefore, the Data Protection Bill, of 2023 ensures to afford extra
protection for children, concerning their data.
Fostering trust online is a fundamental challenge to ensure that the opportunities emerging out
of the economy can be fully leveraged. As the global economy shifts to connected information
space, its central component is personal data that drives online cross-border commercial
activity, the flow of which may affect individuals, businesses, and government.
This Bill ensures that any personal data shall be collected only by lawful, fair, and consensual
means from an individual and must be used or disclosed for the purposes for which the data
were collected or any other directly related purpose.
4