The Pakistan Telecommunication Authority (PTA) has resumed the registration of Virtual Private Network (VPN) service providers, offering class licences for data services at fees ranging from Rs100,000 to Rs300,000. This move is part of a broader initiative to bring VPN services under regulatory oversight, ensuring that they comply with Pakistan’s data protection laws.
PTA officials stated that the licensing framework will allow for effective monitoring and regulation of VPN services. One key aspect of the new system is that VPN providers will now be required to operate through locally registered data centres, aligning with domestic laws and providing the PTA with access to user data and browsing history. This enhanced oversight aims to strengthen cybersecurity measures and improve the ability to detect and trace cyberattacks.
Also Read: PTA Confirms No Plans to Block VPNs
The initiative follows consultations with stakeholders, including the Pakistan Software Houses Association (P@SHA), which pushed for a streamlined registration process to facilitate smoother operations. VPN providers must now adhere to local data protection regulations, and establishing local data centres will be a critical requirement for compliance.
Previously, the PTA granted licences for companies offering internet, cellular services, and vehicle trackers. Now, a new category for VPNs has been introduced, enabling local companies to provide proxy services under Pakistani laws and regulatory guidelines. This shift allows the regulator to exert greater control over VPN providers, particularly as many of them have been foreign entities operating outside the country’s legal framework.
Documents available on the PTA’s website indicate that the terms of these licences will extend to any company offering VPN services, and service providers will be required to share all relevant technical, regulatory, or financial information with the PTA when requested.
