The Pakistan Telecommunication Authority (PTA) has clarified that it does not obtain user information from social media platforms for criminal investigations, stressing that such powers lie with designated law enforcement bodies.
In a written briefing submitted to the Senate Standing Committee on Information Technology and Telecommunication, the regulator explained that its mandate under the Prevention of Electronic Crimes Act (PECA) 2016 is restricted to regulating online content, including blocking or removing material deemed unlawful.
According to the PTA, responsibility for acquiring digital evidence and user data rests with the National Cyber Crime Investigation Agency (NCCIA), which is legally empowered under Section 29 of PECA to conduct investigations.
The authority stated that it does not engage with social media companies — including Meta-owned Facebook and Instagram, YouTube, or other platforms — for the purpose of securing user data. Any coordination related to investigations is carried out directly between the NCCIA and relevant law enforcement agencies.
Addressing questions about the absence of local offices of global social media companies in Pakistan, the PTA said it has repeatedly invited major platforms to register under the Social Media Rules 2021. However, companies have so far avoided establishing physical operations in the country, citing concerns over potential criminal liability for employees, regulatory uncertainty, and commercial considerations.
The briefing also discussed a controversy surrounding the removal of a post by Pakistan’s defence minister on the social media platform X regarding Israel. The PTA informed lawmakers that it had neither received a complaint seeking restoration of the post nor taken any regulatory action in the matter. The authority said it would act only if a formal request is filed through proper legal channels.
Additionally, the PTA highlighted recent amendments introduced to PECA, including new provisions aimed at criminalizing the spread of false information online. Under Section 26A of the amended law, individuals found guilty may face up to three years imprisonment along with fines of up to Rs. 2 million.
The amendments also propose the establishment of a Social Media Protection and Regulatory Authority (SMPRA), tasked with overseeing platform compliance, regulating online content, and managing disputes through specialized tribunals designed to handle appeals under the updated digital regulatory framework.
