Despite the Pakistan Telecommunication Authority (PTA) offering companies the opportunity to register their VPNs ten days ago, no company has yet submitted a registration request, sources revealed on Monday.
The PTA initiated the VPN registration process on December 19. Over ten days later, the authority has not received a single application.
However, PTA sources anticipate receiving applications within the next two to four weeks. They explained that through licensing, VPN service providers will be locally registered.
The providers will also be required to establish data centres in Pakistan.
Furthermore, the PTA plans to charge VPN service providers a licencing fee ranging from Rs200,000 to Rs400,000. The providers will be obligated to comply with local data protection laws.
The registration process is expected to enhance the identification and tracking of cyberattacks, ensuring improved cybersecurity measures.
The authority says that the decision to register VPN service providers came in light of consultations with stakeholders.
Last week, the PTA resumed the registration of virtual private network (VPN) service providers.
According to PTA officials, the licensing initiative aims to bring VPN providers under regulatory oversight. Following the implementation, providers will be required to operate with locally registered data centres and comply with Pakistan's data protection laws.
According to sources, the class licensing framework will enable the PTA to monitor and regulate VPN services effectively.
Crucially, the PTA will gain access to user data and browsing history under licensing conditions, a move designed to bolster cybersecurity measures. The measure will also empower the authority to detect and trace cyberattacks more effectively.
The initiative has come in light of consultations with stakeholders, including the Pakistan Software Houses Association (P@SHA), which formally requested the registration process to streamline operations.
Sources added that VPN providers must adhere to local data protection regulations, ensuring compliance with domestic laws. Furthermore, companies offering these services will need to establish local data centres to facilitate monitoring and regulatory requirements.
COMMENTS
Comments are moderated and generally will be posted if they are on-topic and not abusive.
For more information, please see our Comments FAQ