The government has clarified that cellular mobile operators in Pakistan are not allowed to share consumer data with any third party. The Minister-in-Charge of the Cabinet Division informed the National Assembly in a written reply that strict confidentiality rules govern telecom operators under their licenses and regulatory frameworks.
According to the minister, operators are legally restricted from disclosing user information to external parties, including their own affiliates and subsidiaries. Clauses 7.7.1 and 7.7.2 of the Long Distance and International (LDI) and Local Loop Licenses state that data sharing is only permitted under limited circumstances. These include debt collection, inter-operator services, legal obligations, or situations where the customer gives prior informed consent. Even in such cases, only the minimum required data can be shared.
The written response also referred to Regulation 16 of the Telecom Consumers Protection Regulations, 2009. It requires telecom operators to maintain complete confidentiality of consumer data. Likewise, Clause 10.1 of the Third Party Service Provider License focuses on consumer protection, demanding that all licensees have effective complaint-handling systems and strong safeguards against fraud, privacy breaches, and service delays.
The Ministry emphasized that no customer information can be disclosed unless the situation falls within the approved exceptions or the user has explicitly agreed after being informed of all relevant details. Any data disclosure without following these conditions is a direct violation of license obligations and consumer protection laws. The government further warned that operators must ensure strict compliance to protect users’ personal information and prevent any misuse.
Meanwhile, the Pakistan Telecommunication Authority (PTA) is addressing the rise in fraudulent communications. The regulator has sent over 1.065 billion awareness messages to mobile users, warning them about scam calls and SMS. Special ringback tones, developed in partnership with the State Bank of Pakistan and the Securities and Exchange Commission of Pakistan, have also been activated to educate users about financial fraud.
PTA has taken additional measures, including blocking masked Universal Access Numbers (UANs) used by scammers impersonating banks. To make the process more accessible, the authority has launched an online Complaint Management System (CMS) that allows consumers to report suspicious activity directly. These steps are part of ongoing efforts to strengthen cybersecurity and safeguard the public from deceptive practices.