Regulatory Alerts2026-05-25
Added · Updated
National Database and Registration Authority (Requisite Access to National Data Warehouse) Regulations, 2026
These regulations establish a comprehensive, mandatory framework for controlling and securing access to the National Data Warehouse by requiring integrated Customer Due Diligence, multi-modal biometric verification, and strict purpose-bound data minimization. All requesting entities must execute a formal Services Agreement, adhere to specific technical and security baselines, and maintain immutable audit logs for every transaction to ensure full traceability and accountability. The Authority retains exclusive control over data, mandates immediate breach reporting within 12 hours, and prohibits the unauthorized storage, aggregation, or monetization of sensitive identity attributes.
GOVERNMENT OF PAKISTAN NATIONAL DATABASE & REGISTRATION AUTHORITY INTERIOR DIVISION State Bank of Pakistan Building, Shahrah-e-Jamhuriat, G-5/2, Islamabad.
Statutory Notifications (S.R.O.)
GOVERNMENT OF PAKISTAN NATIONAL DATABASE & REGISTRATION AUTHORITY INTERIOR DIVISION
NOTIFICATION Islamabad Monday, May 12, 2026
S.R.O. ___(I)/2026.— WHEREAS, the National Database and Registration Authority has been established under the National Database and Registration Authority Ordinance, 2000 (VIII of 2000) for the purposes of registration of all persons and things and for the establishment and maintenance of multipurpose databases, data warehouses, networking, interfacing of databases and related facilities and services; [Translation: S.R.O. ___(I)/2026.— WHEREAS, the National Database and Registration Authority has been established under the National Database and Registration Authority Ordinance, 2000 (VIII of 2000) for the purposes of registration of all persons and things and for the establishment and maintenance of multipurpose databases, data warehouses, networking, interfacing of databases and related facilities and services;]
AND WHEREAS clause (i) of sub-section (1) of section 7 of the said Ordinance empowers the Authority to provide Requisite Access, whether online or offline, into the National Data Warehouse to all government, semi-government and private institutions in such manner and for such fee as may be prescribed by regulations; [Translation: AND WHEREAS clause (i) of sub-section (1) of section 7 of the said Ordinance empowers the Authority to provide Requisite Access, whether online or offline, into the National Data Warehouse to all government, semi-government and private institutions in such manner and for such fee as may be prescribed by regulations;]
AND WHEREAS clause (h) of sub-section (1) of section 7 of the said Ordinance provides for the establishment of an intranet-like environment, to be called the National Information Infrastructure, for the purpose of providing online access into the National Data Warehouse; [Translation: AND WHEREAS clause (h) of sub-section (1) of section 7 of the said Ordinance provides for the establishment of an intranet-like environment, to be called the National Information Infrastructure, for the purpose of providing online access into the National Data Warehouse;]
AND WHEREAS, clause (d) of sub-section (4) of section 5 of the said Ordinance mandates the Authority to ensure and provide by regulations the due security, secrecy and necessary safeguards for protection and confidentiality of data and information contained in the registration and database systems developed, established or maintained under the Ordinance; [Translation: AND WHEREAS, clause (d) of sub-section (4) of section 5 of the said Ordinance mandates the Authority to ensure and provide by regulations the due security, secrecy and necessary safeguards for protection and confidentiality of data and information contained in the registration and database systems developed, established or maintained under the Ordinance;]
AND WHEREAS clause (f) of sub-section (2) of section 24 of the said Ordinance provides for the levy and collection of fees and other sums for the provision of services and related matters by the Authority; [Translation: AND WHEREAS clause (f) of sub-section (2) of section 24 of the said Ordinance provides for the levy and collection of fees and other sums for the provision of services and related matters by the Authority;]
AND WHEREAS these Regulations are intended to fully consolidate, repeal and replace all prior data-sharing frameworks, including the National Database and Registration Authority (Data Sharing) Regulations, 2024, and to constitute the sole and comprehensive legal framework governing all forms of access to and verification against the National Data Warehouse; [Translation: AND WHEREAS these Regulations are intended to fully consolidate, repeal and replace all prior data-sharing frameworks, including the National Database and Registration Authority (Data Sharing) Regulations, 2024, and to constitute the sole and comprehensive legal framework governing all forms of access to and verification against the National Data Warehouse;]
(Full text follows, reflecting the sections provided in the source PDF structure...)