The government has assured that data collected through the ICT Household Survey will remain secure, stating that a robust legal and technical framework is already in place to protect citizens’ information, even without a dedicated data protection law.
Officials explained that the system relies on existing legislation and a multi-layered security approach managed by NADRA. They emphasized that no data can be shared without approval from the Ministry of Interior, and any misuse would be treated as a serious offense against the state.
Central to this framework is the NADRA Ordinance of 2000, which provides a legal basis for handling sensitive citizen information. Unauthorized access, leaks, or misuse can result in strict penalties, including up to 14 years of imprisonment. These protections are further reinforced by the Prevention of Electronic Crimes Act (PECA).
NADRA’s systems have been classified as Critical Information Infrastructure, ensuring they are subject to heightened national security measures, strict cybersecurity protocols, and continuous monitoring to prevent breaches that could affect public systems or national safety.
Technically, the framework follows international standards, including ISO-based security practices. Data is encrypted end-to-end during transmission and storage, and access is tightly restricted, with all activity recorded through audit trails. A 24/7 Security Operations Centre monitors the system, supported by firewalls, anti-attack mechanisms, and regular vulnerability testing.
All survey data will be housed within NADRA’s existing national database, which already safeguards sensitive identity records. Officials confirmed that the same level of confidentiality and security applied to national identity data will extend to survey data.
The briefing aims to address growing concerns about data privacy in Pakistan, which still lacks a standalone personal data protection law. By leveraging existing legislation and advanced security measures, the government seeks to reassure Parliament and the public that citizens’ information will remain protected.
About the Author
