Pakistan PECA
Amended Pakistan ยท no upcoming deadlines
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
Pakistan's main cybercrime law, covering unauthorised access, data interference, cyber stalking and related offences, plus investigation powers. The 2025 amendment creates a Social Media Protection and Regulatory Authority that enlists social media platforms, orders removal or blocking of unlawful content, and can block non-compliant platforms. It also adds a Social Media Protection Tribunal, a new National Cyber Crime Investigation Agency, and an offence of spreading false information.
- Who it applies to
- Everyone in Pakistan, Pakistani citizens anywhere, acts abroad that affect people or systems in Pakistan, and social media platforms accessible from Pakistan.
- Penalties
- The new false information offence (s. 26A) carries up to 3 years in prison, a fine of up to PKR 2 million, or both. The Authority can partly or fully block platforms that do not comply.
- Enforced by
- Social Media Protection and Regulatory Authority; National Cyber Crime Investigation Agency (NCCIA); Pakistan Telecommunication Authority
- Official name
- Prevention of Electronic Crimes Act, 2016 (as amended by the Prevention of Electronic Crimes (Amendment) Act, 2025)
- Citation
- Act No. XL of 2016; amended by Act No. II of 2025
- Topics
- cybersecurity, online-safety
Research notes
The 2016 Act took effect at once on enactment, but the official NA copy checked does not show the assent date, so enacted_date and effective_date are left blank. Pakistan's draft personal data protection bill has not been enacted.
Related
Questions about Pakistan PECA
- What are the Pakistan PECA compliance deadlines?
- Jan 29, 2025: PECA amendment takes effect.
- Who does Pakistan PECA apply to?
- Everyone in Pakistan, Pakistani citizens anywhere, acts abroad that affect people or systems in Pakistan, and social media platforms accessible from Pakistan.
- What are the penalties under Pakistan PECA?
- The new false information offence (s. 26A) carries up to 3 years in prison, a fine of up to PKR 2 million, or both. The Authority can partly or fully block platforms that do not comply.