ISLAMABAD – Pakistan’s nearly 200 million mobile users are caught in what experts describe as an unprecedented data privacy crisis, as reports of mass-scale information leaks and alleged misuse of user data by telecom operators have triggered widespread outrage and forced government action.
The scandal, involving major operators such as Jazz, has sparked deep public distrust in the telecom sector. In a written response to the National Assembly, the Minister-in-Charge of the Cabinet Division insisted that telecom companies are legally prohibited from sharing user data with third parties, except under very limited and regulated circumstances.
The minister cited provisions from Long Distance and International (LDI) and Local Loop Licenses, which specify that user data may only be shared for purposes such as debt recovery, inter-operator services, or legal compliance, and only with the customer’s informed consent. Even then, only the minimum necessary information may be disclosed.
Additionally, Regulation 16 of the Telecom Consumers Protection Regulations, 2009 mandates complete confidentiality of subscriber information, while Clause 10.1 of the Third Party Service Provider License requires strong consumer safeguards against fraud, data theft, and misuse. The minister warned that any unauthorized data disclosure constitutes a serious breach of licensing terms and consumer protection laws.
However, as confidence in the telecom sector erodes, regulators are scrambling to contain the fallout. Authorities have reportedly issued over 1.065 billion awareness messages nationwide, warning users about scam calls and phishing texts. Despite these measures, cyber experts say sensitive personal data, including location details, call records, and international travel histories, is being sold openly on the dark web — with some users’ complete call logs accessible for purchase.
Experts have described this as the rise of a “digital black market” in Pakistan, warning that the country stands at the brink of a digital privacy collapse unless the government enforces accountability, tightens security protocols, and imposes harsh penalties for violators.
As the crisis unfolds, citizens are demanding greater transparency and immediate reforms to restore trust in Pakistan’s telecommunications ecosystem and protect their digital rights.
