As per reports, Pakistan’s legislature is considering a data protection bill that defines biometrics as “sensitive personal data” and mandates the creation of a regulatory framework for special permissions relating to biometric data.
Privacy International (PI) says the bill contains “vague exceptions allowing the government to evade responsibility and deny individuals’ ability to exercise their rights to access their data and submit a complaint,” and would not grant the data protection authority sufficient independence to enforce the law. The bill also contains a data localization clause, which the rights group calls part of a “worrying trend.”