The Constitution guarantees dignity and privacy, and PECA 2016 criminalises unauthorised access and non-consensual image sharing — but Pakistan still lacks a comprehensive data-protection law. This guide explains the current protections and practical self-defence.

Draft pending advocate review. This guide is awaiting final review by Advocate Muhammad Iqbal Khan.

Your phone records your location. Your messages are stored on servers. Your photograph can be taken in public and posted online within seconds. In an age of data, the right to privacy — long recognised in principle — faces challenges the framers of our laws never imagined.

This guide explains the right to privacy and data protection in Pakistan: the constitutional foundation, the statutory protections that exist, and the practical steps to protect yourself. This is general information, not advice for your particular situation.

The constitutional foundation

Article 14 of the Constitution declares that the dignity of man — and, subject to law, the privacy of home — shall be inviolable. Courts have interpreted dignity expansively to include informational privacy: the right to control personal information about oneself. This constitutional anchor means privacy is a fundamental right, not a mere policy preference — and state intrusions must be justified by law.

Related protections include the inviolability of correspondence and the broader due-process guarantees that restrain arbitrary state action against the person.

Statutory protections: PECA and beyond

The Prevention of Electronic Crimes Act, 2016 is currently the most detailed privacy-relevant statute:

  • Unauthorised access and interception: accessing information systems or intercepting transmissions without authorisation is criminalised.
  • Privacy violations: PECA criminalises the transmission of intimate images or information without consent — directly addressing non-consensual image sharing.
  • Data interference: damaging, deleting, or altering data without authorisation is an offence.
  • Procedural safeguards: the Act sets procedures for lawful access by investigators, including judicial oversight mechanisms.

Sectoral protections also exist — for example, banking secrecy obligations and telecom consumer-protection rules — but they are fragmented rather than comprehensive.

The missing piece: comprehensive data protection

Pakistan does not yet have a single, comprehensive data-protection statute of the kind many countries have adopted — a law governing how companies collect, use, store, and share personal data, with an independent regulator and individual rights of access, correction, and erasure. Draft legislation has been discussed, but as things stand, protection comes from the patchwork described above: the Constitution, PECA, sectoral rules, and the general law.

This gap matters practically: if a company misuses your data, your remedies are less straightforward than under a dedicated data-protection regime — though constitutional petitions, consumer-protection proceedings, and PECA complaints may all be relevant depending on the facts.

Privacy in family disputes: a special warning

Family litigation is where privacy violations most commonly occur in ordinary life:

  • Recording spouses: secretly recording a spouse's calls or messages may violate PECA and constitutional privacy — and illegally obtained material can backfire in court.
  • Sharing intimate images: transmitting a partner's intimate images without consent is a serious criminal offence — during or after a marriage breakdown.
  • Social media exposure: posting private family matters, children's photographs, or allegations online can attract defamation and cybercrime liability.
  • Phone "evidence": think twice before trawling a spouse's phone for evidence — discuss lawful evidence-gathering with your lawyer first.

Your practical checklist

  • Assume anything digital can be copied — share personal information and images accordingly.
  • Use strong, unique passwords and two-factor authentication on important accounts.
  • Review app permissions — many apps collect far more data than they need.
  • Do not secretly record or surveil a spouse to "gather evidence" without legal advice.
  • Never share anyone's intimate images — the criminal consequences are severe.
  • If your privacy is violated, preserve evidence and consider PECA, constitutional, and consumer remedies.
  • Read privacy policies before entrusting sensitive data to apps and services.

Frequently asked questions

Does Pakistan have a data protection law like the GDPR?

Not yet — there is no single comprehensive data-protection statute. Protection currently comes from the Constitution, PECA 2016, sectoral rules, and the general law.

Can I record my spouse's calls as evidence?

Secret interception can violate PECA and privacy rights, and unlawfully obtained material may harm rather than help your case. Take legal advice on lawful evidence first.

What if someone shares my private photos online?

Non-consensual sharing of intimate images is a serious offence under PECA. Preserve evidence and complain to the FIA Cybercrime Wing promptly.

Can the state access my data?

Lawful access by state agencies must follow legal procedures, including the safeguards in PECA. Arbitrary, lawless intrusion violates constitutional protections.

Related guides

Need guidance on your situation? Privacy violations in family disputes need careful handling — lawful evidence-gathering protects both your case and your rights. Contact us to book a confidential consultation.

By Advocate Muhammad Iqbal Khan

Draft pending advocate review.

Last reviewed:

This article provides general legal information, not legal advice for your specific matter.

Common questions

Not yet — there is no single comprehensive data-protection statute. Protection currently comes from the Constitution, PECA 2016, sectoral rules, and the general law.

Secret interception can violate PECA and privacy rights, and unlawfully obtained material may harm rather than help your case. Take legal advice on lawful evidence first.

Non-consensual sharing of intimate images is a serious offence under PECA. Preserve evidence and complain to the FIA Cybercrime Wing promptly.

Lawful access by state agencies must follow legal procedures, including the safeguards in PECA. Arbitrary, lawless intrusion violates constitutional protections.

Related guides

Need guidance on your matter? Book a Consultation

This article provides general legal information, not legal advice for your specific matter. Online contact does not create an advocate–client relationship.