The Pakistan Telecommunication Authority (PTA) has introduced the draft of its new Critical Telecom Data and Infrastructure Security Regulations 2025 (CTDISR-2025) and invited public feedback before formal implementation. The proposed regulations aim to enhance cybersecurity and protect Pakistan’s Critical Information Infrastructure (CII).
Under the new rules, telecom operators will be required to localize data within Pakistan and establish disaster recovery and business continuity plans. The PTA emphasized that these steps are essential to ensure national data security and safeguard telecom networks from growing cyber threats.
The CTDISR-2025 introduces a comprehensive security framework for all telecom licensees, including mobile network operators and internet service providers (ISPs). Each company will need to form an Information Security Steering Committee (ISSC) chaired by the CEO and appoint a Chief Information Security Officer (CISO) to oversee compliance with the new cybersecurity standards.
In addition, telecom firms must maintain secure data repositories, implement vendor and supply chain security measures, and continuously monitor for potential risks. The framework also makes it mandatory to adopt a Zero Trust and Access Control Policy to prevent unauthorized access and protect customer data from breaches.
The PTA has uploaded the draft regulations on its official website and invited public comments until November 7, 2025. Stakeholders, including telecom companies, IT organizations, and cybersecurity professionals, are encouraged to share feedback through the online submission form.
Once finalized, the CTDISR-2025 will replace the 2020 framework, setting a higher standard for data protection and cyber resilience across the telecom sector. Officials said the new regulations reflect the PTA’s continued commitment to strengthening Pakistan’s digital infrastructure and ensuring the safety of users’ data.
In other news read more about: Telecom imports dropped to 50% in the first 10 months of FY23 compared to FY22: CEO Jazz Aamir Ibrahim
