Pakistan - Digital Transformation Policy (2018)

Digital Pakistan Policy (2018)

Pakistan

RAI-PK-NA-DIGPA20-2018
Adopted(Adopted)
PolicyGovernance and OversightData Protection and PrivacyCybersecurity and Model Security
Export PDF

The Digital Pakistan Policy (May 2018) is Pakistan's national roadmap to build a holistic digital ecosystem by promoting broadband access, digitisation of public services, incentives for the IT/ITeS industry, data protection frameworks, and capacity building. Approved by the federal cabinet in May 2018, it sets institutional responsibilities and an implementation agenda to accelerate digital transformation across sectors.

Summary

The Digital Pakistan Policy (2018), prepared by the Ministry of Information Technology & Telecommunication (MoITT) and approved by the Federal Cabinet in May 2018, establishes a comprehensive national framework designed to accelerate Pakistan's digital transformation. Its overarching vision is to improve citizens’ quality of life and economic well-being through accessible, affordable, and reliable ICT services. The policy outlines 12 strategic objectives, including broadband expansion, sectoral digitisation (education, health, agriculture), human capital development and digital skills, promotion of IT exports, incubation and entrepreneurship support, adoption of emerging technologies (AI, IoT, fintech), cloud services framework, and the enactment of necessary legal/regulatory instruments such as a data protection law.

The document recommends fiscal and non-fiscal incentives to boost IT/ITeS exports (including tax holidays and export remittance incentives), reforms to ease registration and renewal processes for call centres and exporters, allocation of land and Special Economic Zones for technology companies, and institutional strengthening of agencies like Pakistan Software Export Board (PSEB) and MoITT. It calls for an actionable implementation framework, monitoring and evaluation mechanisms, and inter-ministerial coordination to achieve measurable targets. The policy also highlights the need for cybersecurity measures, data classification and cloud computing standards, e-commerce frameworks, and partnerships with provincial governments, private sector, and international partners.

In practical terms, the policy functions as a strategic direction rather than a statute: it directs relevant ministries and regulators to prepare follow-up regulations, action plans and incentives. The Digital Pakistan Policy therefore drives a suite of subsequent initiatives in digital infrastructure, human capital development, industry promotion, and legal modernization (notably leading to later debates and proposals around personal data protection and sectoral digitalisation programs). Primary sources for the policy are the MoITT policy PDF and the Cabinet press release announcing approval in May 2018. These sources specify the date of approval and the policy document that serves as the authoritative text for the policy’s objectives and measures.

Full article

Read full text ↗

Overview

The Digital Pakistan Policy (May 2018) issued by the Ministry of Information Technology & Telecommunication (MoITT) and approved by the federal cabinet sets out a national strategy to transform Pakistan into a digital economy and society. The document identifies broadband availability, public sector digitisation, industry incentives, digital skills, and a regulatory baseline (including data protection) as pillars for enabling rapid delivery of next-generation digital services. The official policy text is published by MoITT (Digital Pakistan Policy (MoITT PDF)) and the cabinet approval is recorded in the Press Information Department release (PID Press Release, 23 May 2018). The policy functions as a high-level roadmap to be implemented through sectoral action plans, fiscal measures for IT/ITeS export promotion, and institutional strengthening.

Definitions

The policy uses operational definitions for key terms to guide implementation: "digital ecosystem" (infrastructure, platforms, services and applications), "IT/ITeS" (information technology and IT-enabled services), "broadband" (high-speed internet access enabling advanced services), "sectoral digitisation" (application of ICT in education, health, agriculture, finance, etc.), and "data protection" (legal and technical measures to secure personal and sensitive data). It also distinguishes between government-provided digital services and private-sector digital products, and identifies stakeholders: federal and provincial ministries, regulators, industry associations such as PASHA, and development partners. These definitional anchors ensure subsequent operational documents (action plans, regulations) align with the policy's intent.

Governance and Institutional Framework

The policy assigns central stewardship to the Ministry of Information Technology & Telecommunication (MoITT) and envisages a coordinated institutional architecture including Pakistan Software Export Board (PSEB), Pakistan Telecommunication Authority (PTA), Federal Board of Revenue (FBR) for fiscal measures, and relevant provincial departments for local implementation. It calls for creation or strengthening of inter-ministerial committees to oversee delivery, and for the MoITT to serve as an aggregator of demand for digital services while supplying shared platforms and standards. The policy also recommends partnerships with private sector bodies such as the Pakistan Software Houses Association (PASHA) to design incentive packages, workforce development initiatives, and incubation networks. Key institutional responsibilities include drafting subsidiary regulations (e.g., cloud frameworks, e-commerce guidelines), monitoring targets, and aligning incentives with export-promotion objectives.

Key Focus Areas

The policy identifies and elaborates a set of priority focus areas: (1) Broadband expansion and infrastructure to close connectivity gaps and catalyse digital services; (2) Sectoral digitisation to embed ICT in public services — especially education, healthcare and agriculture — to improve delivery and outcomes; (3) Human capital development and digital skills training to prepare the workforce for emerging technology roles; (4) Industry promotion and export-led growth through fiscal incentives, land allocation for IT parks, and regulatory easing for call centers and exporters; (5) Promotion of startups, incubation centres and venture capital initiatives in thematic domains (FinTech, AI, IoT, robotics); (6) Legal and regulatory modernization including enactment of a data protection law, cloud computing standards, and an e-commerce framework; (7) Cybersecurity and resilience measures to secure national digital infrastructure; and (8) International cooperation and alignment to facilitate trade, investment and adoption of global standards.

Implementation Framework

The policy prescribes a phased implementation approach with MoITT leading formulation of detailed action plans and timelines. Core implementation instruments include: fiscal incentives (tax holidays and remittance reward schemes); regulatory instruments prepared in consultation with stakeholders (data protection law, cloud regulations, e-commerce guidelines); public-private partnerships for infrastructure and incubation; capacity-building programs for civil servants and youth; and performance-based monitoring with defined KPIs. The policy signals required coordination with the Finance Division, Board of Investment, State Bank of Pakistan (for remittance coding and rewards), and provincial governments for localized rollout. The document foresees PSEB and PTA playing active roles in outreach, facilitation, and market-enabling tasks.

Monitoring and Evaluation

The policy requires establishment of monitoring and evaluation mechanisms to track progress against targets such as broadband penetration, IT export growth, job creation, and the adoption of digital services in priority sectors. It recommends periodic reporting to cabinet-level committees and publication of progress reports to promote transparency. Implementation monitoring is to include measurable KPIs, stakeholder consultations, and annual reviews to update the action plan. The policy also envisages feedback loops with industry and civil society to refine measures and to ensure alignment with user needs and rights, including assessments of social impact when deploying large-scale digital services.

Penalties, Liability, and Appeals

As a policy instrument rather than primary legislation, the Digital Pakistan Policy itself does not establish a new penalty regime; instead it directs regulators to design proportionate enforcement mechanisms within future laws and regulations (for example, data protection or cybersecurity rules) and to define liability and appeals processes in those instruments. The policy anticipates legal instruments to determine administrative sanctions, civil remedies and criminal penalties where required, and calls for accessible appeal mechanisms and judicial review consistent with constitutional guarantees. It also underscores the need for clear accountability in procurement, public-private partnerships and subsidy programmes to reduce misuse or corruption.

Relationship to Other Instruments

The policy is explicitly designed to complement and trigger subordinate legislation and sectoral rules: it calls for a dedicated data protection law, cloud computing framework, e-commerce policy, and enabling fiscal measures to be enacted or implemented by the relevant ministries and regulators. It references existing national instruments and institutions (e.g., existing telecom policy, PSEB mandates) and seeks alignment with broader economic policies and trade commitments (such as potential accession to the WTO Information Technology Agreement). The policy therefore acts as a catalyst for legal and regulatory changes rather than replacing sectoral laws.

International Alignment

Digital Pakistan emphasises harmonisation with international norms and standards: it encourages adoption of global best practices in data protection, cybersecurity, and cloud computing, and recommends collaboration with multilateral and bilateral partners to attract investment, technical assistance and market access. The policy indicates intent to work with the Ministry of Commerce for accession to the WTO Information Technology Agreement (ITA) to remove tariff barriers on ICT products and to promote export competitiveness. It also foresees participation in international fora to align Pakistan's standards and to facilitate cross-border data flows consistent with future data protection rules.

Implementation Timeline

PhaseActionsIndicative Timeline
Phase 1Cabinet approval; publication of policy; stakeholder consultations; drafting of immediate action plans for broadband and fiscal incentives.May 2018 – Dec 2018
Phase 2Develop and approve regulatory frameworks (data protection, cloud), launch skills programmes, begin SEZ/land allocation for IT parks, start PSEB-led export initiatives.2019 – 2020
Phase 3Scale sectoral digitisation projects (education, health, agriculture), implement monitoring dashboards, refine incentives based on performance.2020 – 2022
Phase 4Institutionalize governance mechanisms, international alignment, and review/refresh policy targets.2023 onwards

Sources and References

SourceType
Digital Pakistan Policy (Ministry of Information Technology & Telecommunication, 2018)Primary Source
Press Information Department: Cabinet approval, 23 May 2018Primary Source
Pakistan Software Export Board (PSEB) - roles & programsReference

Requirements for a company

What an organisation has to do under Pakistan - Digital Transformation Policy (2018), at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.

Must do

11
  • Formulate detailed action plans and timelines for policy implementation.Ministry of Information Technology & Telecommunication (MoITT)
  • Enact a dedicated data protection law.Ministry of Law, Ministry of Information Technology & Telecommunication
  • Develop cloud computing standards and regulations.Ministry of Information Technology & Telecommunication (MoITT)
  • Establish an e-commerce framework.Ministry of Information Technology & Telecommunication (MoITT)
  • Implement fiscal incentives for IT/ITeS industry promotion and export-led growth.Federal Board of Revenue (FBR), Pakistan Software Export Board (PSEB)
  • Develop and launch digital skills training programs for workforce development.MoITT, Provincial education departments
  • +5 more in the table below

Must not do

0

Nothing in this category.

Should do

2
  • Promote startups, incubation centers, and venture capital initiatives in thematic domains.MoITT, Pakistan Software Export Board (PSEB), private sector partners
  • Adopt global best practices in data protection, cybersecurity, and cloud computing.MoITT, relevant regulators

Should not do

0

Nothing in this category.

Who must do what

The obligations under Pakistan - Digital Transformation Policy (2018), most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1Ministry of Information Technology & Telecommunication (MoITT)Formulate detailed action plans and timelines for policy implementation.
The policy prescribes a phased implementation approach with MoITT leading formulation of detailed action plans and timelines.
Dec 31, 2018Implementation FrameworkImportant
2Ministry of Law, Ministry of Information Technology & TelecommunicationEnact a dedicated data protection law.
Legal and regulatory modernization including enactment of a data protection law
Dec 31, 2020Key Focus AreasImportant
3Ministry of Information Technology & Telecommunication (MoITT)Develop cloud computing standards and regulations.
drafting subsidiary regulations (e.g., cloud frameworks), cloud computing standards
Dec 31, 2020Governance and Institutional FrameworkImportant
4Ministry of Information Technology & Telecommunication (MoITT)Establish an e-commerce framework.
drafting subsidiary regulations (e.g., e-commerce guidelines), and an e-commerce framework
Dec 31, 2020Governance and Institutional FrameworkImportant
5Federal Board of Revenue (FBR), Pakistan Software Export Board (PSEB)Implement fiscal incentives for IT/ITeS industry promotion and export-led growth.
Industry promotion and export-led growth through fiscal incentives
Dec 31, 2020Key Focus AreasImportant
6MoITT, Provincial education departmentsDevelop and launch digital skills training programs for workforce development.
Human capital development and digital skills training to prepare the workforce for emerging technology roles
Dec 31, 2020Key Focus AreasImportant
7Relevant government entitiesEnsure cybersecurity and resilience measures to secure national digital infrastructure.
Cybersecurity and resilience measures to secure national digital infrastructure
Key Focus AreasImportant
8Ministry of Information Technology & Telecommunication (MoITT)Create or strengthen inter-ministerial committees to oversee policy delivery.
It calls for creation or strengthening of inter-ministerial committees to oversee delivery
Governance and Institutional FrameworkImportant
9Ministry of Information Technology & Telecommunication (MoITT)Align incentives with export-promotion objectives for the IT/ITeS industry.
aligning incentives with export-promotion objectives.
Governance and Institutional FrameworkImportant
10Ministry of Information Technology & Telecommunication (MoITT)Establish monitoring and evaluation mechanisms to track policy progress.
The policy requires establishment of monitoring and evaluation mechanisms to track progress against targets
Dec 31, 2022Monitoring and EvaluationImportant
11Ministry of Information Technology & Telecommunication (MoITT)Conduct periodic reporting to cabinet-level committees and publish progress reports.
It recommends periodic reporting to cabinet-level committees and publication of progress reports
Dec 31, 2022Monitoring and EvaluationImportant
12MoITT, Pakistan Software Export Board (PSEB), private sector partnersPromote startups, incubation centers, and venture capital initiatives in thematic domains.
Promotion of startups, incubation centres and venture capital initiatives in thematic domains
Key Focus AreasRecommended
13MoITT, relevant regulatorsAdopt global best practices in data protection, cybersecurity, and cloud computing.
encourages adoption of global best practices in data protection, cybersecurity, and cloud computing
International AlignmentRecommended

© Regulations.AI · updated on 13-Jun-2026