Cabinet gives nod to two cyberspace security bills

[FOOLS_NIGHTMARE]

• E-Safety Bill 2023 aims to regulate digital media platforms.
• Personal Data Protection Bill 2023 aims to protect personal data.
• Both bills elicit strong reservations from digital rights activists.

ISLAMABAD: Given the government's belief that regulators such as Pakistan Telecommunications Authority (PTA) and Pakistan Electronic Media Regulatory Authority (Pemra) have been unable to scrutinise or regulate social media and online media sites in the country, the federal cabinet has approved two new bills for the purpose, The News reported Thursday.

The new bills are the Personal Data Protection Bill 2023 and the E-Safety Bill 2023.

The E-Safety Bill 2023 reportedly aims to bring digital media platforms under strict regulations, whereby it is proposed that a separate regulatory body be established to penalise those who commit any violations.

This bill will regulate web-based channels and online news websites and proposes establishing a separate regulatory. This regulatory will be empowered to impose a penalty if a web-based channel or online media outlet airs or publishes any information maligning someone.

On the other hand, the Personal Data Protection Bill 2023 will govern the collection, processing, use, and disclosure of personal data and establish and make provisions for offences relating to violation of the right to data privacy of individuals by collecting, obtaining, or processing of personal data by any means.

'Personal data' means any information that relates directly or indirectly to a data subject who is identified or identifiable from that information or from that and other information in the possession of a data controller and/or data processor, including any sensitive or critical personal data.

Under the proposed bill, personal data will only be collected, processed and disclosed as necessary and in compliance with the provisions of the approved law.

According to the bill, within six months of the passage of the law, the federal government is to establish a commission known as the National Commission for Personal Data Protection (NCPDP) of Pakistan.

However, the proposed legislation — both bills — have elicited strong reservations from digital rights activists and advocacy think tanks.

Internet advocacy group Bolo Bhi, in a statement issued on Wednesday, has said that "legislation prepared in secrecy and passed in haste disregarding input and clear reservations, serves no protective purpose but reeks of nefarious designs to further curb the rights and liberties of citizens", adding that "these bills must not be passed."

Bolo Bhi has said that both the bills, "if moved in the National Assembly of Pakistan, [should] be deferred to a standing committee for further deliberations, which should be open and transparent.."

In a tweet, PPP's Farhatullah Babar has also criticised how the digital bills have been approved by Cabinet, writing that it is "wrong for a coalition government to push through far-reaching digital related legislation hurriedly [and] in [an] opaque manner in its last days. Not taking on board even coalition partners let alone all stakeholders [is] deeply disturbing".

https://twitter.com/x/status/1684258940786180114

Journalist, digital rights, and civic responsibility advocate Farieha Aziz tweeted, "Pakistan's Personal Data Protection Bill 2023 must not be passed in haste or we will end up with another PECA. Industry and rights groups have both expressed reservations. While input was provided to the ministry over the years, substantive issues remain."

The bills will now be moved to the Cabinet Committee for Disposal of Legislative Cases (CCLC) and then tabled in Parliament.

Cabinet gives nod to two cyberspace security bills

Govt believes PTA, Pemra have been unable to scrutinise, regulate social media, online media sites

www.geo.tv

 

[FOOLS_NIGHTMARE]

Impact of new ‘cyber laws’ may be felt far and wide​

• E-Safety bill envisions creation of new regulator to register websites, YouTube channels
• Data protection bill calls on internet, social media companies to comply with local rules

ISLAMABAD: Two pieces of legislation approved by the federal cabinet on Wednesday are expected to have a widespread impact on the digital rights of individuals, as well as country’s ecommerce and digital economy.

The E-Safety Bill 2023 and the Personal Data Protection Bill 2023 were given principle approval by the cabinet, which also okayed the establishment of a commission to enforce the latter.

However, international bodies representing internet-based platforms have expressed concerns over the draft data protection law, fearing that it would raise the cost of doing business in Pakistan.

The data protection bill, as per an official statement, aims to protect user data and prevent the illegal use of information systems. It would ensure the protection and prevent the unauthorised use of consumers’ data on all types of online services, e.g. online shopping, as well as data provided to various companies and social networking websites in Pakistan.

The E-Safety bill aims to prevent crimes such as online harassment, cyber bullying, blackmailing, and envisions the creation of a new regulatory authority will be established, known as ‘The E-Safety Authority’. This will ostensibly be responsible for registering and monitoring websites, web channels, YouTube channels, and the existing websites of media houses.

A senior official of the IT ministry told Dawn that the idea behind establishing the E-Safety Authority was to protect the rights of citizens, businesses as well as both public and private institutions from online harassment and blackmail.

Currently, the PTA has the power to monitor content and check back-end enforcement of relevant laws online at websites, whereas the FIA enforces cybercrime laws. The proposed E-Safety authority, however, will monitor the front-end of all websites, take notice of violations and even impose penalties.

“This was essential, as cybercrime cases occur at a much faster pace than FIA can investigate them, while the role of PTA is limited to regulatory functions and violations related to internet and telecom service providers,” the official said.

The new authority will also have the power to grant licences to websites, including web channels, and will even regulate existing news and media website.

Data protection

The draft data protection law will govern the privacy of data collected by various online services, digital platforms, e-commerce websites and even news and entertainment websites etc.

The bill defines “personal data” as any information that relates directly or indirectly to a subject, who is identified or identifiable from that information, including any sensitive or critical personal data.

However, anonymised, or pseudonymised data is not considered “personal data” in light of the proposed bill.

Under this legislation, all entities that collect or maintain data or data processers “digitally or non-digitally” operational in Pakistan, will have to register themselves locally and will also be required to appoint a data protection officer.

The registration function will be carried out by a National Commission for Personal Data Protection (NCPDP), which is to be established within six months of the passage of the bill. This commission may set up its sub-offices in provincial capitals and other places, as it may deem necessary from time to time. The bill, which first appeared in the form of the ‘Protection of Personal Data Bill 2021’, was earlier granted approval by the Imran Khan-led cabinet in February 2022.

Concerns

After it was reported that the bill had received cabinet assent, the Asia Internet Coalition (AIC) issued a statement highlighting concerns regarding the data protection bill.

Issued by AIC Managing Director Jeff Paine, the statement points out that in its current form, the bill falls short of international standards for data protection and creates unnecessary complexities that will increase the cost of doing business and dampen foreign investment.

“By requiring unspecified ‘critical’ data to be stored locally and through significantly restricting the cross-border transfer of all other personal data, the bill will limit Pakistanis’ access to many global digital services,” Mr Paine said.

He said the bill creates additional barriers to digital trade at a critical time, when Pakistan’s economic growth demands paramount attention.

The AIC has called on the government to undertake more transparent stakeholder consultations over this subject.

Digital rights campaigner and Meta board member, Nighat Dad, told Dawn that while the subject the bill dealt with was very important, there had not been any consultations over it. “This secretive style is undemocratic.”

However, an IT ministry official said it was its responsibility to protect the interests Pakistan and Pakistanis, whereas commercial entities were only worried about their businesses.

Impact of new ‘cyber laws’ may be felt far and wide

E-Safety bill envisions creation of new regulator to register websites, YouTube channels.

www.dawn.com