Digital Nation Pakistan Act 2025

Briefing

By Rahnuma · AI-generated

The Digital Nation Pakistan Act, 2025 is umbrella legislation establishing the legal and institutional framework for digital government, digital services, and the digital economy. It establishes three bodies: the National Digital Commission (Chapter 2, Sections 3-5) for strategic direction chaired by the Prime Minister; the Pakistan Digital Authority (Chapter 3, Sections 6-8) as a corporate body responsible for developing, implementing, and monitoring the National Digital Masterplan; and an Oversight Committee (Chapter 4, Sections 9-10) for performance monitoring. The Act creates a non-lapsable Digital Nation Fund (Section 13), mandates annual review of the Masterplan (Section 11(5)), and includes an override clause making its provisions prevail over other laws (Section 28) while preserving data protection and cybersecurity provisions. P@SHA submitted detailed review feedback during drafting of this Act.

Plain-language explanation

The Digital Nation Pakistan Act, 2025 is landmark legislation that creates a complete governance structure for Pakistan's digital transformation. Think of it as building the 'operating system' for a digital Pakistan. Three new bodies will oversee this: a Prime Minister-led Commission for big-picture strategy, an Authority to do the actual work of setting standards and implementing projects, and an Oversight Committee to check that the Authority is performing well. The Authority will develop and maintain a National Digital Masterplan that all government agencies and regulated entities must follow. For example, if the health ministry wants to launch a digital patient records system, it must align with the Masterplan. A special non-lapsable Fund will finance these initiatives using government money, international grants, and loans. The Act overrides conflicting laws but protects existing data protection and cybersecurity rules. Companies in sectors like fintech, health tech, or e-governance services should monitor Authority regulations as they will set technology standards and compliance requirements affecting private sector operations.

Compliance & opportunity checklist

Monitor Authority regulations under Section 8(b) for technology standards, data governance, and AI/virtual asset frameworks that may affect your operations.
Review your current digital initiatives against the forthcoming Masterplan and prepare alignment plans per Section 12(1) to avoid compliance issues.
Identify opportunities to collaborate with the Authority on digital public infrastructure projects under Section 8(k) as a private sector partner.
Engage with the Authority during Masterplan consultations as permitted under Section 11(4) to represent industry interests in sectoral plans for health, finance, agriculture, or other sectors.
Assess implications of Section 8(g) (emerging technologies oversight) for any AI, virtual asset, or blockchain initiatives in your business.
Prepare for potential changes in data sharing requirements under the National Data Strategy mandated by Section 8(h).
Ensure any government-facing digital services or contracts account for the Authority's citizen experience standards under Section 8(m).
Review Section 20 for potential participation in development partner arrangements supporting digital transformation initiatives.

Key numbers

Commission meeting quorum

three-fourths of members including Chair members

· Section 4(7)

Prime Minister appointment of Authority replacements

90 days

from vacancy · Section 7(7)

Authority meeting quorum

two Members including Chairperson members

· Section 7(12)

Authority member term

5 years

· Section 7(4)

Oversight Committee independent member term

3 years

· Section 9(4)

Commission meetings

1 meeting minimum

every 6 months · Section 4(6)

Oversight Committee meetings

1 meeting minimum

every quarter · Section 9(8)

Annual report submission

90 days

after close of financial year · Section 16(1)

Masterplan review

1 review minimum

annually · Section 11(5)

Removal of difficulties power

6 months

from commencement · Section 30

Authority composition

1 Chairperson + 2 Members (maximum 5) persons

· Section 7(1)

Requisition for Commission meeting

one-fourth of total membership

· Section 4(8)

Frequently asked

By Rahnuma · AI-generated

Does the Act give the Pakistan Digital Authority power to regulate emerging technologies like AI and virtual assets, and how does this interact with existing regulators?

Yes, Section 8(g) empowers the Authority to carry out oversight, set standards, enforce compliance, and establish frameworks for artificial intelligence, virtual assets, and other emerging technologies. However, the Authority must ensure no overlap with existing regulatory mandates or conflicts with relevant laws and regulatory frameworks. Section 28(2) further preserves specific data rights and cybersecurity provisions in other laws.

What funding mechanisms are available through the Digital Nation Fund, and can private sector companies access these?

Section 13(2) enumerates multiple funding sources: federal government allocations, loans from federal/provincial/local governments, grants, international aid from multilateral organisations and philanthropies, and investment income. Section 20 permits collaboration with development partners including international donors and multilateral organisations. While the Fund is administered by the Authority, the Act does not explicitly prohibit private sector participation in projects funded through development partner arrangements.

What compliance obligations do businesses and government entities face under this Act?

Section 12 mandates all entities identified in the Masterplan to align policies, operations, and digital initiatives with its objectives. Entities must develop alignment plans with the Authority including actions, timelines, and capacity-building measures. Section 12(4) provides a graduated enforcement process: formal notice, deadline for correction, and referral to the Commission if non-compliance persists. The Authority can recommend sanctions to the Commission.

How does Section 28 (Act to override other laws) affect existing sector-specific regulations?

Section 28(1) states the Act prevails over inconsistent provisions in other laws. However, Section 28(2) carves out specific measures for protecting citizens' data rights and cybersecurity, which retain overriding effect. Section 28(3) establishes a consultative process requiring the Authority to involve relevant stakeholders and regulatory bodies to resolve conflicts, with the Commission able to issue directives or propose legislative amendments if conflicts persist.

What are the timelines for key milestones under the Act?

Section 12(4) requires entities to engage with the Authority on alignment plans with specified timelines. Section 16(1) mandates annual reporting within 90 days after the close of each financial year. Section 11(5) requires annual review of the Masterplan or more frequently as needed. Section 30 limits the Federal Government's power to remove difficulties to within six months of commencement. Section 7(7) requires the Prime Minister to appoint replacements for vacancies within 90 days.

Ask about this document

Cited in

Wins formal · Made in Pakistan: public sector IT procurement mandates

Related instruments

Enables AI

National AI Policy 2025 (Approved)

The Authority is tasked with integrating emerging technologies such as AI into the National Digital Masterplan, thereby enabling the deployment and scaling of AI initiatives outlined in the National AI Policy 2025.

Part of AI

National AI Policy 2025 (Approved)

The National AI Policy 2025 constitutes a sectoral plan under the National Digital Masterplan, which the National Digital Commission is empowered to approve and the Pakistan Digital Authority to implement under sections 5(a) and 8(a) of the Act.

Enables AI

Digital Pakistan Policy

The Act establishes the Pakistan Digital Authority and National Digital Masterplan, providing the governance structure and implementation mechanism required to execute the objectives of the Digital Pakistan Policy.

Part of P@SHA

Digital Pakistan Policy

Statutory consolidation of the 2018 Digital Pakistan vision.

Depends on AI

National Cybersecurity Policy 2021 (Final)

The Act's secure Digital Public Infrastructure, particularly the data exchange layer, depends on the standards and guidelines set by the National Cybersecurity Policy 2021 to protect digital systems.

Enables AI

National Cybersecurity Policy 2021 (Final)

The Digital Nation Act 2025 (id:18) creates Digital Public Infrastructure including cybersecurity systems, with Section 5(b) empowering the Commission to issue directives to regulatory bodies to align their policies with the National Digital Masterpl

Conflicts AI

Personal Data Protection Bill 2023 (Draft)

Section 28 of the Digital Nation Act 2025 (id:18) explicitly states the Act shall override other laws, creating a potential conflict with the Personal Data Protection Bill 2023 (id:13) on matters of data governance and data protection regulations.

Depends on AI

Personal Data Protection Bill 2023 (Draft)

The Act's data governance framework and digital identity mechanisms rely on the legal foundation provided by the Personal Data Protection Bill 2023 for lawful processing and privacy safeguards.

Enables AI

Forex Retention Rules: IT Exporters

The Digital Nation Act 2025 (id:18) aims to foster digital economy development under Section 11(u), which directly depends on the Forex Retention Rules: IT Exporters (id:31) as a fiscal mechanism enabling IT sector growth and foreign exchange retenti

Part of AI

PSEB Annual Reports

The Digital Nation Pakistan Act 2025 establishes the National Digital Commission and Pakistan Digital Authority that PSEB operates within and reports on throughout this annual report.

Discuss this document

Start a discussion

Rate this briefing

Cite this document

Use the canonical URL for citations and references.

https://pashapolicy.production1.jugaar.ai/documents/digital-nation-pakistan-act-2025