PTA Finally Explains Who Really Gets Your Social Media Data in Pakistan

The Pakistan Telecommunication Authority (PTA) has clarified that it does not directly obtain user data from social media platforms such as Facebook, Instagram, X, and YouTube for criminal investigations, telling lawmakers that the responsibility lies with the National Cyber Crime Investigation Agency (NCCIA).

The clarification came in a written response submitted to the Senate Standing Committee on Information Technology during discussions over the role of authorities and global tech companies in providing digital data for investigations in Pakistan.

According to the PTA document, the regulator’s authority under Section 37(1) of the Prevention of Electronic Crimes Act (PECA) 2016 is limited to blocking or removing unlawful online content. The authority stressed that it neither collects social media user data nor directly coordinates with platforms to obtain such information for investigative purposes.

Instead, PTA stated that NCCIA, along with other law enforcement agencies, is responsible for contacting social media companies and requesting user data when required during investigations under Section 29 of PECA.

The development comes at a time when concerns around online surveillance, digital privacy, and government oversight of social media platforms continue to grow in Pakistan following recent amendments to PECA.

In its submission, PTA also revealed that major social media companies have repeatedly refused to establish offices in Pakistan despite multiple requests from authorities. According to the regulator, the platforms have expressed concerns regarding possible criminal liability, regulatory uncertainty, and broader business risks associated with operating locally.

The authority further informed the Senate committee that no cooperation mechanism currently exists under which PTA receives social media user data from global platforms.

The briefing also highlighted key changes introduced under the recently amended PECA law. Under the new provisions, spreading false or fake information online has been declared a punishable offense carrying up to three years imprisonment and fines of up to Rs2 million.

The amendments additionally led to the establishment of the Social Media Protection and Regulatory Authority (SMPRA), which will oversee social media regulation and compliance matters in the country.

Separate Social Media Protection Tribunals (SMPTs) have also been formed to handle appeals and digital regulatory cases involving online content and platform-related disputes.

PTA maintained that its primary role remains to regulate telecom and internet services and restrict unlawful online material under the legal framework provided by PECA.