The Citizens Protection (Against Online Harm) Rules, 2020, introduced under the Pakistan Telecommunication (Re-Organization) Act, 1996 (PTA Act) and the Prevention of Electronic Crimes Act, 2016 (PECA), raise significant concerns about overreach and the infringement of fundamental rights. These rules mandate data localization by requiring social media platforms to register and establish servers in Pakistan, empower the authority to block content and impose fines, and lack safeguards under Section 37 of PECA to prevent arbitrary actions. Critics argue that the rules undermine Article 19 (freedom of speech) and Article 14 (privacy) of the Constitution, violate the principle of separation of powers by bypassing legislative oversight, and risk enabling misuse to suppress dissent. While addressing national security concerns, the rules must balance these with procedural safeguards to uphold constitutional rights and prevent the chilling effects on expression and digital freedoms.