What is the PECA / PDPB DSAR deadline?

Under Prevention of Electronic Crimes Act 2016 (PECA) + Draft Personal Data Protection Bill (PECA / PDPB), the standard response deadline is 30 days. The counting method is calendar days, starting from the day of receipt.

Who enforces PECA / PDPB?

PECA / PDPB is enforced by Pakistan Telecommunication Authority (PTA) / Federal Investigation Agency (FIA). Maximum penalties: Under PECA: imprisonment up to 3 years and/or fine up to PKR 1M; draft PDPB proposes higher penalties.

🇵🇰PECA / PDPB

Pakistan — PECA / Draft PDPB DSAR Deadline Calculator

Q: Can I extend a PECA / PDPB deadline?

No. PECA / PDPB does not provide for deadline extensions under standard circumstances.

Calculate your exact response deadline under Prevention of Electronic Crimes Act 2016 (PECA) + Draft Personal Data Protection Bill (PECA / PDPB).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

PECA / PDPB Overview

Full Name

Prevention of Electronic Crimes Act 2016 (PECA) + Draft Personal Data Protection Bill

Effective Since

2016-08-11

Regulatory Authority

Pakistan Telecommunication Authority (PTA) / Federal Investigation Agency (FIA)

Official Text

View law

Maximum Penalties

Under PECA: imprisonment up to 3 years and/or fine up to PKR 1M; draft PDPB proposes higher penalties

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access Draft PDPB — Right to obtain information about personal data processing	30 days	Not available
Right to Correction Draft PDPB — Right to request correction of inaccurate personal data	30 days	Not available
Right to Deletion Draft PDPB — Right to request erasure of personal data	30 days	Not available

Request Type

Deadline

Extension

Right of Access

Draft PDPB — Right to obtain information about personal data processing

30 days

Not available

Right to Correction

Draft PDPB — Right to request correction of inaccurate personal data

30 days

Not available

Right to Deletion

Draft PDPB — Right to request erasure of personal data

30 days

Not available

Extension Rules

PECA / PDPB does not provide for deadline extensions under standard circumstances.

Special Rules & Common Mistakes

•IMPORTANT: Pakistan does not yet have an enacted comprehensive data protection law
•The 30-day deadline is based on the draft Personal Data Protection Bill (PDPB) — UNVERIFIED
•PECA 2016 addresses cybercrime and provides limited data protection provisions
•Unauthorized access to data is criminalized under PECA Section 3
•The draft PDPB has been under consideration but not enacted as of early 2026
•PTA and FIA have joint jurisdiction over electronic data protection matters
•Verify current legislative status before relying on these deadlines

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇵🇰 Pakistan	30 days	calendar days	No
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days