NADRA (Data Sharing) Regulations, 2024 and Regulations for Issuance of Citizenship Certificates in Doubtful Cases, 2024

NADRA (Data Sharing) Regulations, 2024

CHAPTER-1: PRELIMINARY

1. Short title and commencement.—These regulations may be called the NADRA (Data Sharing) Regulations, 2024.
   1.1. These Regulations shall come into force on the date of their publication in the Official Gazette.

2. Definitions.—In these regulations, unless there is anything repugnant in the subject or context:
   2.1. “Authority” means the National Database and Registration Authority established under section 3 of NADRA Ordinance (VIII of 2000).
   2.2. “access” means the permission or authorization granted to a third party, allowing them to interact with specific digital systems or data exclusively through electronic or remote means.
   2.3. “authentication” means the process of confirming an individual’s identity by matching provided credentials against those stored in the NADRA Citizen Database.

(Note: Sections 2.4 through 2.22 provide further technical definitions including biometric data, templates, CISO, CIO, Citizen Database, data, database, Data Subject, sharing, DSA, demographic information, NDW, Ordinance, personnel, personal data, requesting entity, third party, and verification.)

CHAPTER-2: PRINCIPLES OF DATA SHARING

3. Purpose and Scope
3.1. These regulations govern data sharing by the Authority to ensure compliance with laws, privacy, and security.

5. Purpose of Data Sharing
5.1. Data sharing shall only further the lawful purposes of the Authority, including registration, maintaining multipurpose databases, facilitating state and public affairs, and minimizing corruption.

6. Data Sharing
6.1. The Authority shall authorize and approve data sharing.
6.2. Approvals shall never be for an unlimited time period.

7. Principles for Data Sharing
7.1. Data sharing must comply with applicable privacy laws, use the minimum data necessary, and maintain technical/organizational security.

8. Data Sharing Process
8.1. Third parties must submit a formal request specifying the purpose and data required.

9. Restrictions on Data Sharing
9.1. Data shall not be shared for purposes inconsistent with the Ordinance or violating Data Subject rights.
9.3. Third parties cannot further share data without express written consent.

11. Prohibition relating to Biometric data
11.1.1. No entity shall create, maintain, or operate an independent repository of biometric data received from the Authority or citizens.

---

Regulations for Issuance of Citizenship Certificates in Doubtful Cases, 2024

1.1. These regulations shall be called the “Regulations for Issuance of Citizenship Certificates in Doubtful Cases, 2024.”
1.2. They shall come into force immediately.

2. Purpose
   2.1. These regulations establish a mandatory procedural framework for processing applications regarding citizenship status in cases of doubt.

4.1. Submission of Application
(a) Applicants must submit a formal application and an affidavit as prescribed by the Pakistan Citizenship Rules, 1952. (c) The affidavit must be duly attested by an Oath Commissioner or Notary Public. (f) Denied applicants shall be informed in writing of the grounds for denial.

4.6. Fees
(a) The applicant shall pay the fee of Rs. 800 as prescribed in Schedule-III.
(c) The fee is non-refundable.