Proposed Data Governance Policy Could Expand Pakistan Digital Authority’s Role
The Pakistan Digital Authority (PDA) is expected to play a significantly larger role in the country’s digital governance framework under the proposed National Data Governance Policy 2026, which outlines new responsibilities for managing and overseeing public-sector data.
Prepared by the Ministry of Information Technology and Telecommunication, the draft policy identifies the PDA as the lead institution responsible for setting national data governance standards, monitoring implementation, and promoting compliance across federal government organizations.
If approved, the authority would be empowered to issue official directions to federal ministries, departments, and public-sector institutions to help ensure they follow the national data governance framework.
The proposed policy also assigns the PDA responsibility for managing several key national digital platforms, including the National Open Data Portal, the National Data Exchange (WASL), and the National Data Catalogue. In addition, the authority would conduct periodic assessments to evaluate how public bodies are implementing data governance standards.
Under the proposed framework, every federal public institution would be required to appoint an Agency Chief Data Officer (CDO). These officials would oversee data management within their organizations, maintain data inventories, ensure compliance with relevant policies, and report progress and incidents to the PDA.
The policy further recommends establishing a National Data Governance Council, chaired by the Pakistan Digital Authority. The council would include representatives from federal and provincial governments, regulatory bodies, and other stakeholders to improve coordination on national data governance matters.
Another key proposal is the introduction of a National Data Maturity Index, which would measure the effectiveness of data governance practices across public institutions. The results would be published annually and used to identify areas for improvement.
According to the draft policy, the PDA would also have the authority to conduct audits, recommend corrective measures, and monitor compliance with national data standards. Where necessary, enforcement actions could be taken under applicable laws in cases of continued non-compliance.
The policy clarifies that while the PDA would oversee public-sector data governance, the protection of citizens’ personal data would remain the responsibility of the authority established under Pakistan’s future personal data protection legislation.
