Pakistan - Digital Transformation Policy (2018)
Digital Pakistan Policy (2018)
Pakistan
RAI-PK-NA-DIGPA20-2018The Digital Pakistan Policy (May 2018) is Pakistan's national roadmap to build a holistic digital ecosystem by promoting broadband access, digitisation of public services, incentives for the IT/ITeS industry, data protection frameworks, and capacity building. Approved by the federal cabinet in May 2018, it sets institutional responsibilities and an implementation agenda to accelerate digital transformation across sectors.
Summary
The Digital Pakistan Policy (2018), prepared by the Ministry of Information Technology & Telecommunication (MoITT) and approved by the Federal Cabinet in May 2018, establishes a comprehensive national framework designed to accelerate Pakistan's digital transformation. Its overarching vision is to improve citizens’ quality of life and economic well-being through accessible, affordable, and reliable ICT services. The policy outlines 12 strategic objectives, including broadband expansion, sectoral digitisation (education, health, agriculture), human capital development and digital skills, promotion of IT exports, incubation and entrepreneurship support, adoption of emerging technologies (AI, IoT, fintech), cloud services framework, and the enactment of necessary legal/regulatory instruments such as a data protection law.
The document recommends fiscal and non-fiscal incentives to boost IT/ITeS exports (including tax holidays and export remittance incentives), reforms to ease registration and renewal processes for call centres and exporters, allocation of land and Special Economic Zones for technology companies, and institutional strengthening of agencies like Pakistan Software Export Board (PSEB) and MoITT. It calls for an actionable implementation framework, monitoring and evaluation mechanisms, and inter-ministerial coordination to achieve measurable targets. The policy also highlights the need for cybersecurity measures, data classification and cloud computing standards, e-commerce frameworks, and partnerships with provincial governments, private sector, and international partners.
In practical terms, the policy functions as a strategic direction rather than a statute: it directs relevant ministries and regulators to prepare follow-up regulations, action plans and incentives. The Digital Pakistan Policy therefore drives a suite of subsequent initiatives in digital infrastructure, human capital development, industry promotion, and legal modernization (notably leading to later debates and proposals around personal data protection and sectoral digitalisation programs). Primary sources for the policy are the MoITT policy PDF and the Cabinet press release announcing approval in May 2018. These sources specify the date of approval and the policy document that serves as the authoritative text for the policy’s objectives and measures.
Full article
Read full text ↗Overview
The Digital Pakistan Policy (May 2018) issued by the Ministry of Information Technology & Telecommunication (MoITT) and approved by the federal cabinet sets out a national strategy to transform Pakistan into a digital economy and society. The document identifies broadband availability, public sector digitisation, industry incentives, digital skills, and a regulatory baseline (including data protection) as pillars for enabling rapid delivery of next-generation digital services. The official policy text is published by MoITT (Digital Pakistan Policy (MoITT PDF)) and the cabinet approval is recorded in the Press Information Department release (PID Press Release, 23 May 2018). The policy functions as a high-level roadmap to be implemented through sectoral action plans, fiscal measures for IT/ITeS export promotion, and institutional strengthening.
Definitions
The policy uses operational definitions for key terms to guide implementation: "digital ecosystem" (infrastructure, platforms, services and applications), "IT/ITeS" (information technology and IT-enabled services), "broadband" (high-speed internet access enabling advanced services), "sectoral digitisation" (application of ICT in education, health, agriculture, finance, etc.), and "data protection" (legal and technical measures to secure personal and sensitive data). It also distinguishes between government-provided digital services and private-sector digital products, and identifies stakeholders: federal and provincial ministries, regulators, industry associations such as PASHA, and development partners. These definitional anchors ensure subsequent operational documents (action plans, regulations) align with the policy's intent.
Governance and Institutional Framework
The policy assigns central stewardship to the Ministry of Information Technology & Telecommunication (MoITT) and envisages a coordinated institutional architecture including Pakistan Software Export Board (PSEB), Pakistan Telecommunication Authority (PTA), Federal Board of Revenue (FBR) for fiscal measures, and relevant provincial departments for local implementation. It calls for creation or strengthening of inter-ministerial committees to oversee delivery, and for the MoITT to serve as an aggregator of demand for digital services while supplying shared platforms and standards. The policy also recommends partnerships with private sector bodies such as the Pakistan Software Houses Association (PASHA) to design incentive packages, workforce development initiatives, and incubation networks. Key institutional responsibilities include drafting subsidiary regulations (e.g., cloud frameworks, e-commerce guidelines), monitoring targets, and aligning incentives with export-promotion objectives.
Key Focus Areas
The policy identifies and elaborates a set of priority focus areas: (1) Broadband expansion and infrastructure to close connectivity gaps and catalyse digital services; (2) Sectoral digitisation to embed ICT in public services — especially education, healthcare and agriculture — to improve delivery and outcomes; (3) Human capital development and digital skills training to prepare the workforce for emerging technology roles; (4) Industry promotion and export-led growth through fiscal incentives, land allocation for IT parks, and regulatory easing for call centers and exporters; (5) Promotion of startups, incubation centres and venture capital initiatives in thematic domains (FinTech, AI, IoT, robotics); (6) Legal and regulatory modernization including enactment of a data protection law, cloud computing standards, and an e-commerce framework; (7) Cybersecurity and resilience measures to secure national digital infrastructure; and (8) International cooperation and alignment to facilitate trade, investment and adoption of global standards.
Implementation Framework
The policy prescribes a phased implementation approach with MoITT leading formulation of detailed action plans and timelines. Core implementation instruments include: fiscal incentives (tax holidays and remittance reward schemes); regulatory instruments prepared in consultation with stakeholders (data protection law, cloud regulations, e-commerce guidelines); public-private partnerships for infrastructure and incubation; capacity-building programs for civil servants and youth; and performance-based monitoring with defined KPIs. The policy signals required coordination with the Finance Division, Board of Investment, State Bank of Pakistan (for remittance coding and rewards), and provincial governments for localized rollout. The document foresees PSEB and PTA playing active roles in outreach, facilitation, and market-enabling tasks.
Monitoring and Evaluation
The policy requires establishment of monitoring and evaluation mechanisms to track progress against targets such as broadband penetration, IT export growth, job creation, and the adoption of digital services in priority sectors. It recommends periodic reporting to cabinet-level committees and publication of progress reports to promote transparency. Implementation monitoring is to include measurable KPIs, stakeholder consultations, and annual reviews to update the action plan. The policy also envisages feedback loops with industry and civil society to refine measures and to ensure alignment with user needs and rights, including assessments of social impact when deploying large-scale digital services.
Penalties, Liability, and Appeals
As a policy instrument rather than primary legislation, the Digital Pakistan Policy itself does not establish a new penalty regime; instead it directs regulators to design proportionate enforcement mechanisms within future laws and regulations (for example, data protection or cybersecurity rules) and to define liability and appeals processes in those instruments. The policy anticipates legal instruments to determine administrative sanctions, civil remedies and criminal penalties where required, and calls for accessible appeal mechanisms and judicial review consistent with constitutional guarantees. It also underscores the need for clear accountability in procurement, public-private partnerships and subsidy programmes to reduce misuse or corruption.
Relationship to Other Instruments
The policy is explicitly designed to complement and trigger subordinate legislation and sectoral rules: it calls for a dedicated data protection law, cloud computing framework, e-commerce policy, and enabling fiscal measures to be enacted or implemented by the relevant ministries and regulators. It references existing national instruments and institutions (e.g., existing telecom policy, PSEB mandates) and seeks alignment with broader economic policies and trade commitments (such as potential accession to the WTO Information Technology Agreement). The policy therefore acts as a catalyst for legal and regulatory changes rather than replacing sectoral laws.
International Alignment
Digital Pakistan emphasises harmonisation with international norms and standards: it encourages adoption of global best practices in data protection, cybersecurity, and cloud computing, and recommends collaboration with multilateral and bilateral partners to attract investment, technical assistance and market access. The policy indicates intent to work with the Ministry of Commerce for accession to the WTO Information Technology Agreement (ITA) to remove tariff barriers on ICT products and to promote export competitiveness. It also foresees participation in international fora to align Pakistan's standards and to facilitate cross-border data flows consistent with future data protection rules.
Implementation Timeline
| Phase | Actions | Indicative Timeline |
|---|---|---|
| Phase 1 | Cabinet approval; publication of policy; stakeholder consultations; drafting of immediate action plans for broadband and fiscal incentives. | May 2018 – Dec 2018 |
| Phase 2 | Develop and approve regulatory frameworks (data protection, cloud), launch skills programmes, begin SEZ/land allocation for IT parks, start PSEB-led export initiatives. | 2019 – 2020 |
| Phase 3 | Scale sectoral digitisation projects (education, health, agriculture), implement monitoring dashboards, refine incentives based on performance. | 2020 – 2022 |
| Phase 4 | Institutionalize governance mechanisms, international alignment, and review/refresh policy targets. | 2023 onwards |
Sources and References
Requirements for a company
What an organisation has to do under Pakistan - Digital Transformation Policy (2018), at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.
Must do
11- Formulate detailed action plans and timelines for policy implementation.Ministry of Information Technology & Telecommunication (MoITT)
- Enact a dedicated data protection law.Ministry of Law, Ministry of Information Technology & Telecommunication
- Develop cloud computing standards and regulations.Ministry of Information Technology & Telecommunication (MoITT)
- Establish an e-commerce framework.Ministry of Information Technology & Telecommunication (MoITT)
- Implement fiscal incentives for IT/ITeS industry promotion and export-led growth.Federal Board of Revenue (FBR), Pakistan Software Export Board (PSEB)
- Develop and launch digital skills training programs for workforce development.MoITT, Provincial education departments
- +5 more in the table below
Must not do
0Nothing in this category.
Should do
2- Promote startups, incubation centers, and venture capital initiatives in thematic domains.MoITT, Pakistan Software Export Board (PSEB), private sector partners
- Adopt global best practices in data protection, cybersecurity, and cloud computing.MoITT, relevant regulators
Should not do
0Nothing in this category.
Who must do what
The obligations under Pakistan - Digital Transformation Policy (2018), most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Ministry of Information Technology & Telecommunication (MoITT) | Formulate detailed action plans and timelines for policy implementation. “The policy prescribes a phased implementation approach with MoITT leading formulation of detailed action plans and timelines.” | Dec 31, 2018 | Implementation Framework | Important |
| 2 | Ministry of Law, Ministry of Information Technology & Telecommunication | Enact a dedicated data protection law. “Legal and regulatory modernization including enactment of a data protection law” | Dec 31, 2020 | Key Focus Areas | Important |
| 3 | Ministry of Information Technology & Telecommunication (MoITT) | Develop cloud computing standards and regulations. “drafting subsidiary regulations (e.g., cloud frameworks), cloud computing standards” | Dec 31, 2020 | Governance and Institutional Framework | Important |
| 4 | Ministry of Information Technology & Telecommunication (MoITT) | Establish an e-commerce framework. “drafting subsidiary regulations (e.g., e-commerce guidelines), and an e-commerce framework” | Dec 31, 2020 | Governance and Institutional Framework | Important |
| 5 | Federal Board of Revenue (FBR), Pakistan Software Export Board (PSEB) | Implement fiscal incentives for IT/ITeS industry promotion and export-led growth. “Industry promotion and export-led growth through fiscal incentives” | Dec 31, 2020 | Key Focus Areas | Important |
| 6 | MoITT, Provincial education departments | Develop and launch digital skills training programs for workforce development. “Human capital development and digital skills training to prepare the workforce for emerging technology roles” | Dec 31, 2020 | Key Focus Areas | Important |
| 7 | Relevant government entities | Ensure cybersecurity and resilience measures to secure national digital infrastructure. “Cybersecurity and resilience measures to secure national digital infrastructure” | — | Key Focus Areas | Important |
| 8 | Ministry of Information Technology & Telecommunication (MoITT) | Create or strengthen inter-ministerial committees to oversee policy delivery. “It calls for creation or strengthening of inter-ministerial committees to oversee delivery” | — | Governance and Institutional Framework | Important |
| 9 | Ministry of Information Technology & Telecommunication (MoITT) | Align incentives with export-promotion objectives for the IT/ITeS industry. “aligning incentives with export-promotion objectives.” | — | Governance and Institutional Framework | Important |
| 10 | Ministry of Information Technology & Telecommunication (MoITT) | Establish monitoring and evaluation mechanisms to track policy progress. “The policy requires establishment of monitoring and evaluation mechanisms to track progress against targets” | Dec 31, 2022 | Monitoring and Evaluation | Important |
| 11 | Ministry of Information Technology & Telecommunication (MoITT) | Conduct periodic reporting to cabinet-level committees and publish progress reports. “It recommends periodic reporting to cabinet-level committees and publication of progress reports” | Dec 31, 2022 | Monitoring and Evaluation | Important |
| 12 | MoITT, Pakistan Software Export Board (PSEB), private sector partners | Promote startups, incubation centers, and venture capital initiatives in thematic domains. “Promotion of startups, incubation centres and venture capital initiatives in thematic domains” | — | Key Focus Areas | Recommended |
| 13 | MoITT, relevant regulators | Adopt global best practices in data protection, cybersecurity, and cloud computing. “encourages adoption of global best practices in data protection, cybersecurity, and cloud computing” | — | International Alignment | Recommended |
Related Regulations
© Regulations.AI · updated on 13-Jun-2026