AI Regulation Tracker / National policy

Pakistan's National Data Governance Policy 2026 Puts Government AI Under Human Review and a Public Registry

Regulatory summary: Pakistan's IT ministry has released a national policy declaring government data a strategic national asset and requiring human review, explainability, and registration for AI used in legally significant public-sector decisions. It takes full effect after federal cabinet approval and Gazette notification.

Primary source

By Anthony Guerriero, Founder, The Leveraged Years · Reviewed by The Leveraged Years Editorial Desk · Published July 9, 2026 · Last updated July 9, 2026

Pakistan's National Data Governance Policy 2026 Puts Government AI Under Human Review and a Public Registry regulation briefing

The Leveraged Years AI Regulation Tracker

Key takeaways

Pakistan moved from having no consolidated public-sector data and AI governance rule to a single national policy that treats government data as a strategic national asset held in trust, recognizes a set of citizen digital rights (including human review of significant automated decisions), and sets a risk-based expectation that government AI in high-impact matters be explainable, auditable, and registered. Press reporting indicates supporting standards will add AI model accountability, explainability, performance and model-drift monitoring, and registration of high-risk AI systems before deployment.
Public-sector CIOs and digital-transformation leads in Pakistani federal and provincial bodies; govtech and AI vendors selling automated decision systems into Pakistani government; data-protection and compliance officers at multinationals operating in Pakistan; and digital-rights and public-law counsel advising on automated decisions, data access, and redress.
Status: Released as a policy document dated June 26, 2026, with public rollout and reporting around July 3, 2026.
Inventory every AI or automated system that touches a Pakistani government decision, mark which ones produce legally significant outcomes, and start building the explainability, audit, monitoring, registration, and human review artifacts now, before cabinet approval starts the alignment clock.

Regulatory Briefing

Bindingness: National policy, full effect after cabinet approval and Gazette notification. Government data governance is set by executive policy under Digital Nation Pakistan, not by an act of Parliament, so the operative document is a policy framework that becomes binding on public bodies once the federal cabinet approves it and it is notified in the official Gazette. Supporting technical standards are expected to follow.
Scope: Federal and, through coordination mechanisms, provincial government use of data and AI in Pakistan. It applies to public bodies that hold or process government data and to any AI or automated system used by government for decisions that carry legal or similarly significant effects on citizens. Vendors and contractors that supply these systems fall in scope through public-body contracts.
What Changed: Pakistan moved from having no consolidated public-sector data and AI governance rule to a single national policy that treats government data as a strategic national asset held in trust, recognizes a set of citizen digital rights (including human review of significant automated decisions), and sets a risk-based expectation that government AI in high-impact matters be explainable, auditable, and registered. Press reporting indicates supporting standards will add AI model accountability, explainability, performance and model-drift monitoring, and registration of high-risk AI systems before deployment.
Who This Affects: Public-sector CIOs and digital-transformation leads in Pakistani federal and provincial bodies; govtech and AI vendors selling automated decision systems into Pakistani government; data-protection and compliance officers at multinationals operating in Pakistan; and digital-rights and public-law counsel advising on automated decisions, data access, and redress.
Current Status: Released as a policy document dated June 26, 2026, with public rollout and reporting around July 3, 2026. Pending federal cabinet approval and Gazette notification. Not yet a binding legal instrument in force.
Effective Date: Full effect follows cabinet approval and Gazette notification; no confirmed in-force date at time of writing. After notification, public bodies are reported to have about twelve months to align systems and contracts.
Primary Source: https://moitt.gov.pk/SiteImage/Policies/Data%20Governance%20Policy%20June%202026.pdf
Secondary Analysis: Arab News (Jul 3, 2026), ProPakistani (Jul 3, 2026), Business Recorder, and Digital Pakistan reported the release and quoted the strategic-national-asset framing, the human-review right, and the Pakistan Digital Authority registry role.
Workflow Impact: Government AI programs will need documented explainability, audit trails, model performance and drift monitoring, a registration entry, and a defined human review route before deploying systems that make legally significant decisions. Procurement and vendor contracts will need clauses that pass these duties through to suppliers.
Operational Next Step: Inventory every AI or automated system that touches a Pakistani government decision, mark which ones produce legally significant outcomes, and start building the explainability, audit, monitoring, registration, and human review artifacts now, before cabinet approval starts the alignment clock.
Last Verified: July 9, 2026

Date	Jurisdiction	Rule	Affected professionals	Status or effective date
2026-07-09	Pakistan	Pakistan moved from having no consolidated public-sector data and AI governance rule to a single national policy that treats government data as a strategic national asset held in trust, recognizes a set of citizen digital rights (including human review of significant automated decisions), and sets a risk-based expectation that government AI in high-impact matters be explainable, auditable, and registered. Press reporting indicates supporting standards will add AI model accountability, explainability, performance and model-drift monitoring, and registration of high-risk AI systems before deployment.	Public-sector CIOs and digital-transformation leads in Pakistani federal and provincial bodies; govtech and AI vendors selling automated decision systems into Pakistani government; data-protection and compliance officers at multinationals operating in Pakistan; and digital-rights and public-law counsel advising on automated decisions, data access, and redress.	Released as a policy document dated June 26, 2026, with public rollout and reporting around July 3, 2026. Pending federal cabinet approval and Gazette notification. Not yet a binding legal instrument in force.

Frequently Asked Questions

Is the National Data Governance Policy 2026 legally binding right now?

No. It is a national policy dated June 26, 2026, and takes full effect only after federal cabinet approval and Gazette notification. As of July 9, 2026 it is pending both steps.

Does it give citizens a right to challenge AI decisions?

Yes. It gives citizens a right to ask for meaningful human review of significant decisions made by automated systems, alongside rights to access, correction, portability, and erasure where permitted.

Do high-risk AI systems have to be registered?

The policy directs that automated systems used in legally significant government decisions be published in a registry maintained by the Pakistan Digital Authority. Press reporting adds that supporting standards will require registration of high-risk AI before deployment; those standards are not yet published.

Who enforces it?

The Pakistan Digital Authority oversees implementation, compliance, and standards, supported by a National Chief Data Officer and a National Data Governance Council coordinating across federal and provincial bodies.

How long will public bodies have to comply once it takes effect?

Reporting indicates public bodies will have roughly twelve months after Gazette notification to align systems and contracts.