P@SHA · Pakistan IT Industry Association Policy Portal
Rahnuma: This Research page tracks P@SHA's current policy priorities across seven active domains—from taxation and fintech regulation to AI skills and trade facilitation. The policy threads reveal deep, multi-year work on foreign transfer regulations and data governance, while the agenda items show concrete actions like commenting on the Personal Data Protection Bill 2023 and engaging on the National AI Policy 2025. For policy leads, this is a strategic overview worth reviewing before aligning your sector work with these cross-cutting initiatives.
By Rahnuma · AI-generated · Ask more on this page →

The research desk

Research & Insight

Thematic clusters across the instrument library, cross-document policy threads, published research reports, and where the team should look next.

Policy threads

Cross-document stories: how several instruments fit together.

The 10-Year FTR Story

The preferential 0.25% Final Tax Regime has been the spine of Pakistan IT outsourcing economics since 2017 — and every renewal cycle has been a P@SHA negotiation. It was recommended in the budget papers, survived three finance bills, was extended to Tax Year 2029 in the Finance Act 2026-27 (Section 154A), and remains P@SHA's #1 carried ask: converting it from a renewable incentive into a permanent statutory benefit for the 5–10 year visibility that buyers and investors actually need.

Getting the Money in, Out, and Around

Exporter payments are a three-front problem: the SBP sets retention and remittance rules (Form R, ESFCA, purpose codes), the FBR decides what the same flows look like for tax (Clause 133 exemptions, WHT at banking stage, PRCs as evidence), and the banks execute inconsistently at the counter. The SBP's 2023 retention relief and the 2026-27 budget reliefs addressed the policy layer; the implementation layer — PRCs through platforms, bank-level Form R behavior, FCY card services — is where live member cases are today, and it is the seam where a misstep on either side of the table silently eats export earnings.

The Data Governance Stack Assembling

Pakistan's data rules are arriving in layers: PECA 2016 (and its 2025 amendment bill) governs electronic content and cybercrime; PTA's 2021 content rules operationalize removal duties; the Personal Data Protection Bill — drafted 2021, revised 2023 — will govern personal data with a heavy compliance burden; and the 2025 National AI Policy explicitly builds on that framework. The Digital Nation Pakistan Act 2025 now sits over the top as the umbrella. For member companies, the question is sequencing: which obligations bind first, where do the regimes conflict, and what the compliance build order should be.

Published reports

No published workbench reports yet.

Where to work next

Recommended and approved by the P@SHA team.

Engage Ministry of IT on National AI Policy 2025 Implementation

The National AI Policy 2025 was recently approved with P@SHA's support, but implementation details remain to be shaped. The policy includes specific provisions like a 100% AI startup tax incentive and a 5 billion rupee AI Research Fund. P@SHA should actively participate in implementation committees to ensure IT industry priorities are represented and incentives are accessible to member companies.

Why now: Document 8 is freshly approved (2025) with concrete numbers (100% tax incentive, 5 billion fund) that could transform the startup ecosystem. Without industry engagement, implementation may favor government entities over private sector.

Next step: Request formal meeting with MoITT Secretary to propose P@SHA representation on AI Policy Implementation Committee and submit written recommendations on eligibility criteria for 100% tax incentive

Submit Comprehensive Feedback on National Freelancing Facilitation Policy Draft

The National Freelancing Facilitation Policy has been in draft since 2023 with P@SHA support. Hard numbers show freelance IT export remittances reached $793.5M with 90% growth (ID 44), making this a critical sector. P@SHA's position paper on taxation for remote workers (ID 3) provides a foundation for detailed policy recommendations.

Why now: ID 19 has been in draft status for two years. With freelancing exports growing 90% annually, delaying policy finalization risks losing momentum and missing regulatory clarity needed by thousands of freelancers.

Next step: Prepare and submit detailed position paper to MoITT with specific recommendations on forex retention rates, registrationSimplification, and social protection frameworks for freelancers

Submit P@SHA Commentary on Personal Data Protection Bill 2023

The Personal Data Protection Bill 2023 remains in draft with P@SHA on 'watch' status. This legislation could significantly impact IT/ITeS operations through compliance requirements and penalties. The superseded 2021 version (ID 14) indicated maximum penalties up to 4% of turnover, which could be crippling for smaller companies.

Why now: Bill 13 has been in draft for two years without passage. As it moves toward finalization, P@SHA must engage now to shape compliance requirements before they become law, protecting member companies from unworkable obligations.

Next step: Prepare comprehensive analysis of Bill 2023 provisions with specific amendments proposals focused on SME exemptions, compliance timelines, and data localization flexibility, submit to MoITT

Advocate for Increased Women Entrepreneurship Fund Allocation

P@SHA's Gender Gap Whitepaper (ID 5) shows women-led startup funding at only 2-3% while proposing 15% allocation. PSEB data shows ICT exports at $3.8B with significant growth potential. Increasing women's participation in tech exports could substantially expand the talent pool and export revenue.

Why now: Budget 2026-27 cycle is approaching. The gap between current allocation (2-3%) and proposed allocation (15%) represents a 5x improvement opportunity. Recent commentary (ID 1) indicates P@SHA has existing budget advocacy channels.

Next step: Prepare budget memoranda for Ministry of Finance and PSEB requesting establishment of dedicated women-tech startup fund with 15% allocation target, include implementation roadmap

Engage SECP to Expand Regulatory Sandbox Guidelines for Tech Startups

SECP's Regulatory Sandbox Guidelines (ID 38) date to 2019 with key parameters unspecified (testing duration, customer limits, transaction caps). Meanwhile, SBP's sandbox (ID 28) specifies a 6-month testing period. Fintech-adjacent tech products need clearer sandbox pathways to reach market.

Why now: With Digital Nation Pakistan Act 2025 (ID 18) recently passed, there's momentum for digital economy regulation. SECP may be updating sandbox guidelines to align with new Act provisions—P@SHA should engage during this window.

Next step: Request meeting with SECP to discuss updating sandbox guidelines with specific proposals for tech startup test parameters, simplified KYC during testing, and clear exit-to-market pathways