The Ministry of Information Technology and Telecommunication has finalized the ‘Personal Data Protection Bill 2020’ aimed at realizing the goal of the full-scale adoption of e-government, increase users’ confidence, and protect users’ data from unauthorized access or usage.
This statement was affirmed by the Secretary Ministry of Information and Telecommunications, Shoaib Ahmad Siddiqui. He stated that the draft bill is almost finalized and will be presented for the approval of the Cabinet shortly, moreover, saying that the legislation will assist users through the securing of their data.
The government has also projected the constitution of a ‘Data Protection Authority’ to constrain the misuse of data and to protect citizens’ confidential information. However, the Secretary said that the Data Protection Authority has not been finalized yet.
The Ministry of Information Technology and Telecommunication had drafted the ‘Personal Data Protection Bill 2020’ and expected feedback from all its stakeholders while proposing a fine of up to Rs. 25 million for those who process or cause to be processed, disseminate, or discloses personal and confidential data in violation of any of the provisions of the proposed legislation. The proposed legislation had been drafted in 2018 but was deferred several times.
It is also worthwhile to provide for the processing, obtaining, holding, usage, and disclosure of data while respecting the rights, freedom, and dignity of natural persons with special regard for their right to privacy, secrecy, and personal identities, and for matters connected therewith and ancillary thereto. In addition to it, a data controller will not process personal data including the sensitive personal data of a data subject unless the subject has consented to the processing of the personal data.
If personal data is required to be transferred to any system beyond the territories of Pakistan or to a system that is not under the direct control of any of the governments of Pakistan, it will be ensured that the country where the data is being transferred offers personal data protection that is at least equivalent to the protections provided under this Act; and that the transferred data will be processed following this Act; and where applicable, consent to it is given by the data subject. Additionally, critical personal data will only be processed in a server or data center within Pakistan.
Personal data is often being collected, processed, and even sold without the knowledge of the person in question. In some cases, such personal information is used for relatively less troublesome commercial purposes like targeted advertising. However, the data thus captured or generated can be misused in many ways like blackmail, behavior modification, phishing scams, etc.
With the advent of 3G/4G in Pakistan, an accelerated increase in the use of broadband has led to an increasingly enhanced reliance on technology, calling for the protection of people’s data against misuse, and thus maintaining their fearless confidence in the use of new technologies.
Although Pakistan has sectoral arrangements/frameworks exist for the protection of data in addition to the Prevention of Electronic Crimes Act 2016 that deals with the crimes relating to unauthorized access to data, it is necessary to arrange for a comprehensive legal framework in line with the constitution and international best practices for personal data protection.
The desired legal framework will clarify the responsibilities of the data collectors and processors, and the rights and privileges of the data subjects along with institutional provisions for the regulation of activities related to the collections, storing processing, and usage of personal data.
This Authority will be a statutory corporate body having perpetual succession and a common seal; and may sue and be sued in its name and; subject to and for this Act, may enter into contracts and may acquire, purchase, take and hold moveable and immovable property of every description; and may convey, assign, surrender, charge, mortgage, reassign, transfer, or otherwise dispose of or deal with any moveable or immovable property or any interest vested in it; and will enjoy operational and administrative autonomy except as specifically provided for under this Act.
Moreover, the Authority will be an autonomous body under the administrative control of the federal government, with its headquarters in Islamabad.
Source: Pro Pakistani
Read more on Code for Pakistan Civic Hackathon 2020 aims to find ingenious solutions
