The 2025 National Privacy Conference was organized on Wednesday to address critical issues surrounding voter data privacy and the state of data protection legislation in Pakistan.
The event was hosted by the Digital Rights Foundation (DRF) to jointly mark global Data Protection Day and launch its latest research paper on voter data privacy in Pakistan.
Policymakers, academics, digital rights experts, civil society organizations, political party representatives, and other key stakeholders gathered to discuss the urgency of adequate data protection laws and regulatory infrastructure. This was deemed particularly important in a country that is eager to digitize its economy yet remains vulnerable to significant data breaches and internet disruptions.
The conference opened with remarks from DRF Executive Director Nighat Dad, who emphasized that “the right to privacy is about more than just the unchecked exchange of personal data… [it] is about public trust, mutual respect, informed consent, and shaping a future that prioritizes citizens’ safety in both online and offline spaces.”
Keynote speaker Saroop Ijaz, Senior Counsel (Asia) for Human Rights Watch, noted, “There is a normalization of infringement of privacy in today’s world whereby you have to bargain your privacy in return for safety. But this is a false binary: when you trade in privacy, it does not make you more secure.”
The first panel, titled “Voter Data Privacy Research: Insights from DRF’s 2024 General Elections Study,” focused on DRF’s research paper which highlights vulnerabilities in Pakistan’s information ecosystem during the February 2024 general elections.
Moderated by DRF’s Cyber Harassment Helpline Lead Hyra Basit, the panel featured researcher Maryam Ali Khan, PPP Punjab Information Secretary Nayab Jan, and HRCP Senior Manager Research and Communications Maheen Pracha.
The panelists discussed critical gaps in the Election Commission of Pakistan’s framework for protecting voter data, as well as political parties’ practices regarding voter data during elections. They also discussed steps to better safeguard voter information.
Nayab Jan noted, “Every political party has a responsibility to maintain digital integrity,” emphasizing the need for internal codes of conduct, legislation, and dialogue.
Maheen Pracha added that the responsibility lies with the Election Commission of Pakistan (ECP) and the National Database and Registration Authority (NADRA). Furthermore, “The perception that the misuse of data is an inconvenience needs to be removed; data misuse can potentially cause great harm to vulnerable individuals.”
The second panel, titled “Data Protection Legislation: Why It’s Needed, and Where We Are Now,” explored the importance of comprehensive data protection laws in Pakistan.
Moderated by DRF’s Senior Research and Grants Associate Seerat Khan, the panel featured privacy expert Zainab Khan Durrani, DRF Programs Lead Irum Shujah, Bolo Bhi co-founder and director Usama Khilji, and NCHR Assistant Director (General) Ghulam Abbas Sipra.
The panelists discussed how the lack of a data protection framework leaves citizens vulnerable to identity theft, spam, and biometric data misuse.
Irum Shujah remarked, “The process of data erasure and consent is difficult for even lawyers to grapple with in the current regulatory framework, let alone everyday citizens.”
The panelists also discussed what key elements must be present in a comprehensive data protection law, such as compliance with international human rights frameworks and Pakistan’s future trajectory given the current political context.
Zainab Khan Durrani stressed, “If the process of making such a law is not consultative, then it will not reflect the needs of the people and will become another law to impede rights rather than guarantee them.”
Both panelists and participants agreed that addressing data vulnerabilities through comprehensive legislation is essential for ensuring a secure and privacy-respecting digital future for Pakistan’s citizens.
