flag

Pakistan

Last updated : August 15, 2025

Digital ID Overview

overview_background_image

Pakistan has a Digital ID system managed by the National Database and Registration Authority (NADRA). The primary component of this system is the Computerized National Identity Card (CNIC), which is digitally encoded with biometric data, including fingerprints and photographs. NADRA has integrated advanced technology into the ID system, allowing for digital verification of personal identity through its National Database.

Pakistan’s digital ID, launched in March 2025, is a ‘dematerialized digital identity card’, meaning physical national ID cards will become obsolete.[9]The digital ID system serves as the main backbone for the ongoing development of Pakistan’s DPI.[10]The system allows citizens to store their identification documents on their smartphones through the Pak ID mobile app and involves collection of biometric data, including an iris scan, fingerprints, and a high-resolution photograph for facial recognition.[11] With Pakistan’s new ‘all-in-one’ digital ID kit, this biometric data is collected by “a single portable unit” to streamline the enrollment process.The kit is also equipped with GPS technology and mobile internet connection, packed inside a heavy duty case that protects the kit in inclement weather when in rural areas. [13]  NADRA has maintained that it has provided centralized digital IDs[14] (CNICs) to approximately 96% of the population to around 120 million adults.[15] The National Digital Commission (NDC) oversees the creation of this comprehensive digital identity system, with NADRA maintaining the biometric database of all individuals.[16] The initiative draws inspiration from successful digital models in other countries, such as India’s Aadhaar system, the UAE and Estonia.[17]

CNIC not just proves identity, but is also used to verify citizenship of individuals.[18] The digital ID of Pakistan uses kinship and places individuals within a family tree to constitute registration.[19] While not mandatory in law, CNIC is de facto mandatory in Pakistan. This is because an individual without a CNIC in Pakistan is ineligible to access public services which include banking transactions, casting their vote, obtaining a passport, driving license, train tickets, etc.[20] Sources claim that marginalised populations like transgender persons, women, migrant workers, undocumented persons (including stateless populations) are excluded from the CNIC.[21] It has been noted that the exclusion faced by communities such as the Bihari community, Bengali-origin residents, and other long-term migrants  due to lack of documentation have been due to various factors, including design limitations.[22] These include the mandatory requirement of associating each ID card to the father/husband, an absence of which would raise significant barriers for women, transgender and other non-binary persons, children, including foundlings outside of institutional care, to access CNICs.[23] Furthermore, there is a strong linkage between CNIC and citizenship, with the government blocking IDs, without due process, leaving those individuals without access to their fundamental rights. The reasons to block IDs could include a question on the individual’s citizenship status or a suspicion of the status of an individual in the family tree.[25] The unblocking of CNIC involves undertaking a re-verification process which has been shown to span as long as five years in some cases.[26]

 An accompanying digital verification system is planned to be launched in August 2025 as a part of Pakistan’s Digital Economy Enhancement Project (DEEP), supported by the World Bank, which aims to bolster coordination of digital services across the country.[27] The World Bank has supported the project with $78 million in funding for development and reforms of legal frameworks, technical and advisory assistance. Civil society and digital rights advocates were notably not included in meaningful consultations during the planning and design of Pakistan’s digital ID system.[29]

Photo by: Nadeem Geelani

Stateless persons are not eligible to access CNICs,[30] However, until recently, they were eligible to receive other forms of identification, such the Alien Registration Card (ARC). Yet, the ARC card and other forms of biometric identities do not grant the same privileges as the CNIC. Specifically, the ARC Card grants holders with the following – permission to stay in Pakistan, ability to work in the Private Sector if they have NARA cards and a work permit, a bank account, intercity travel in non-restricted areas, driving license, and exemption from the Foreigner Act 1946. [31]

To increase access to registration for those in rural areas, where it is difficult to access NADRA registration centers, NADRA utilizes hundreds of Mobile Registration Vans which collect biometric data and register individuals locally.[32] NADRA has also developed ‘Rugged Enrollment Kits’, which are portable devices that are designed to support enrollment in rural and hard to reach areas.[33]  The framework for Digital ID in Pakistan, particularly with the CNIC and the ongoing digitisation initiatives, has been primarily formulated and implemented by the NADRA. NADRA is also supported by NADRA Technologies Limited (NTL), a private, for-profit arm of the public government entity.[34] NTL has exported some of Pakistan’s digital ID technologies to other countries, including Sudan and Turkey.[35] NTL has also been involved in renovating election systems, such as Fiji’s election management system.[36] The public arm of NADRA has also collaborated with other governments to implement digital ID technologies in other countries, such as sending 300 Rugged Enrollment Kits to Somalia in support of their digital ID system rollout as well as assisting the country in setting up their digital ID system.[37]

Law

law_background_image

Domestic law and policy

The legal frameworks for development of Pakistan’s DPI development, including the country’s digital ID system were established in January 2025, two months before the launch of the new digital ID system.[38] The Digital Nation Pakistan Act (2025), enacted in January 2025, is the main legal framework “to provide for the transformation of Pakistan into a digital nation, enabling a digital society, digital economy, and digital governance”.[39] The Act covers Pakistan’s broader establishment of DPI, including establishment of a digital ID system for all citizens, and assigns entities responsible for planning and implementing different aspects.[40]

Pakistan’s DPI is regulated by three government bodies, the Pakistan Digital Authority (PDA), the National Digital Commission (NDC), and the Strategic Oversight Committee (SOC), as stipulated by the Digital Nation Pakistan Act (2025).[41] The Pakistan Digital Authority (PDA) is the government entity responsible for developing, implementing and monitoring the National Digital Masterplan, which is described as a “cohesive framework for digital transformation”.[42] The National Digital Commission (NDC) is assigned as the entity responsible for approving the National Digital Masterplan, providing strategic direction, and coordinating different government bodies “to ensure a unified and collaborative approach to digital transformation across all levels of government”.[43] Finally, the Strategic Oversight Committee (SOC) is responsible for monitoring and evaluating the performance of the PDA, including through independent performance and financial management reviews, review of reports and information, and an annual performance report. [44]

The Act defines digital identity as “legal, secure, verifiable credentials issued to an eligible individual, enabling access to digital services, transactions, and interactions which shall be developed, issued and managed by National Database and Registration Authority under the National Database and Registration Authority Ordinance, 2000. For legal entities, it shall be based on data maintained by the Securities and Exchange Commission of Pakistan or other relevant Federal or Provincial Government entities”.[45] Several new rules have been implemented in 2025 with relation to the ID Card, which involve collection of biometric data of all applicants between the age of 10 and 18 as well as compulsory birth registration of children to gain access to the Child Registration Certificate.[46] NADRA provides a formal grievance redressal mechanism, allowing individuals to file appeals in case of blocked, rejected, or misused ID data. Citizens can lodge complaints via the NADRA website or physically at registration centers.[47]

Data Protection

Pakistan does not currently have a comprehensive data protection law and the bill is still pending legislative approval as of July 2025.[48] The Digital Nation Pakistan Act notably does not establish data protection principles.[49] There is also no independent oversight established through the Act. Under Article 23 of the Act,[50] it is stated that officials of the regulating bodies (PDA, NDC, and SOC) cannot be sued or taken to court for anything they have done as a part of their job as long as they acted in good faith.[51] Article 29 also states that “no decision or action taken under this Act or rule or regulations made thereunder shall be questioned by any agency or challenged in any court or tribunal, nor shall any injunction be granted against such decisions or actions”.[52] These provisions are concerning, considering that they remove any means of public accountability over the authorities responsible for Pakistan’s DPI.[53] International organisations like Amnesty International have recommended that Pakistan “establish a public accountability and transparency mechanism” to ensure vetting and regulation of the three governing bodies.[54]

While there are no privacy safeguards in regards to digital ID in particular, the Constitution of Pakistan, through Article 14, guarantees and recognises the right to privacy as a fundamental right.[55] However, due to a lack of data protection legislation or privacy law, the security of the data of citizens stored and processed is questionable.[56] There are also concerns identified with data breaches that are stored with NADRA, where 2.7 million individuals’ data was found to be compromised between 2019 to 2023.[57] This centralised system for governance purposes raises concerns of surveillance without adequate privacy safeguards and sources caution on the new bill that gives the judiciary limited powers with unfettered powers to the executive.[58] Another striking example of how gaps in legal protections and lack of accountability have enabled problematic digital ID developments in Pakistan is described in the reportPaving a Digital Road to Hell?’, which shows that leaked documents indicated that surveillance technology provided by the United States was exchanged in return for expanded access to Pakistani identity data through re‑registration initiatives in the national ID system.[59]

International Commitments

Pakistan is not a signatory to any binding international treaty solely focused on digital ID, but it participates in forums like the ID4D Initiative by the World Bank and the Digital Cooperation Organization (DCO).[60] By excluding undocumented and stateless persons from ID cards and public services, Pakistan risks violating obligations under Articles 2, 9, and 12 of ICESCR, Articles 17 and 26 of ICCPR, and non-discrimination clauses in CEDAW and CERD.

Designed to Include?

The Impact of Digital ID and Legal Identity on Citizenship and Nationality Rights

background_image

There is a clear and consequential link between exclusion and the implementation of Pakistan’s CNIC system, which is issued exclusively to citizens and is required to access nearly all public and private services, including voting, banking, healthcare, welfare, and even to obtain SIM Cards, making CNIC a de facto requirement for participation in civic life.[61] Moreover, the digital identity system is built on a kinship-based model, where citizenship must be verified through family ties. This structure systematically excludes individuals who cannot meet these criteria such as women and children in cases of divorce, single parenthood, or when a male guardian is absent, as well as for foundlings outside of institutional care,[62] leaving them in legal and bureaucratic limbo.[63]

Notably, despite the government’s initiative to provide Alien Registration Cards to undocumented ethnic Bengalis with an aim to register them and provide them, the measures failed to improve their quality of life. NFA’s country stakeholder in Pakistan shared the refugees and those that were provided with the ARC were only allowed work in the private sector, which often resulted in exploitation due to a lack of labor regulations. There were no minimum wage standards, forcing those who are stateless and other refugees to work overtime, in unsanitary and deplorable conditions.[64] In Machar Colony, Karachi, most women and children without access to citizenship have been forced to enter the private job sector, peeling shrimp for more than 10 hours a day without gloves, tools, or machines.[65]

In Pakistan’s drive to inclusion of its digital ID system, it is yet to address the challenges it faces due to a lack of digital literacy and internet access for many marginalised groups, especially in remote or underserved areas.[66] Furthermore, in terms of inclusion concerns and complaint mechanisms in relation to digital ID systems, there are notable limitations when it comes to marginalised and vulnerable populations. The process can be difficult for those who face unique challenges, such as stateless individuals, refugees, and others without formal proof of citizenship. Stateless individuals, for example, may find it difficult to navigate the complaint system due to their inability to provide the required documentation or citizenship proof, as provided for by the NFA stakeholder in Pakistan. For those who have had their CNICs suspended or blocked due to suspicion of being an ‘alien’, the system may not always provide a swift or fair resolution.[67] Although appeal processes are in place, these often remain inaccessible for vulnerable populations who may lack the resources and the requisite support needed to navigate these bureaucratic processes. It is important to note that in the 2025 CRVS Ministerial Conference, “Pakistan reaffirmed its commitment to ensuring that every citizen is counted and every life event is recorded”.[68] However, to ensure true inclusion in their database and to ensure that the implementation of their domestic laws are in line with their international commitments, the universal inclusion of individuals in the CRVS database needs to be undertaken irrespective of their citizenship status.

Amnesty International has recommended that Pakistan revise its Digital Nation Pakistan Act to ensure non-digital means to access essential services as the absence of this safeguard can further marginalize people and communities who already face marginalization.[69] Conducting human rights impact and data protection assessments of the digital ID system prior to rollout was also recommended.[70] Further, the PDA should consistently monitor human rights and data protection developments, including by establishing a mechanism for meaningful participation of human rights advocates.[71]

Amnesty International also noted in its recommendations to Pakistan that there are not enough protections against use of data for surveillance in current legislation.[72] The lack of privacy safeguards and laws combined with the lack of digital literacy, basic internet access,[73] and data breaches, lead to excluding millions of individuals from accessing basic services in Pakistan.[74]

1.^

‘National Identity Card’ (NADRA Pakistan) <https://www.nadra.gov.pk/national-identity-card/> accessed 4 June 2025.

2.^

‘NADRA’ (Consulate General of Pakistan New York) <https://pakistanconsulateny.org/nadra> accessed 9 June 2025.

3.^

‘Child Registration Certificate (CRC)’ (NADRA Pakistan) <https://www.nadra.gov.pk/child-registration-certificate-crc/> accessed 9 June 2025.

4.^

‘What Are the Documents Required for CNIC in Pakistan?’ (Legal Point, 3 June 2024) <https://legalpoint.pk/documents-required-for-cnic-in-pakistan/> accessed 10 June 2025.

5.^

‘What Are the Documents Required for CNIC in Pakistan?’ (n 4).

6.^

‘What Are the Documents Required for CNIC in Pakistan?’ (n 4).

7.^

‘National Identity Card’ (n 1).

8.^

Osama Khalil, ‘NADRA’s Role in Citizenship Verification & CNIC Process – A Complete Guide’ (Osama Khalil Lawyer & Legal Consultant, 21 April 2025) <https://osamakhalillaw.com/nadra-cnic-verification/> accessed 16 June 2025.

9.^

‘Pakistan Launches First Digital Identity Card System Through NADRA’ (Mobile ID World, 11 March 2025) <https://mobileidworld.com/pakistan-launches-first-digital-identity-card-system-through-nadra/> accessed 16 June 2025; ‘Pakistan Launches 1st Dematerialized Digital Identity Card’ (XinhuaNet Asia & Pacific, 11 March 2025) <https://english.news.cn/asiapacific/20250311/f1b03e11de2f46beb9c11800aaf286af/c.html> accessed 18 June 2025.

10.^

Ayang Macdonald, ‘NADRA Welcomes World Bank to Discuss Digital Identity, Economy’ (Biometric Update, 11 November 2024) <https://www.biometricupdate.com/202411/nadra-welcomes-world-bank-to-discuss-digital-identity-economy> accessed 16 June 2025.

11.^

‘Pakistan Launches First Digital Identity Card System Through NADRA’ (n 9); ‘Pakistan Launches All-in-One Digital ID Kit with Advanced Biometric Features’ (ID Tech, 4 March 2025) <https://idtechwire.com/pakistan-launches-all-in-one-digital-id-kit-with-advanced-biometric-features/> accessed 18 June 2025.

13.^

‘Pakistan Launches All-in-One Digital ID Kit with Advanced Biometric Features’ (n 11).

14.^

Hamza Waqas and Amna Khan, ‘Privacy and Digital Identity: The Case of Pakistan’s NADRA’ (OpenGlobalRights, 4 February 2022) <https://www.openglobalrights.org/privacy-and-digital-identity-the-case-of-pakistans-nadra/> accessed 23 July 2025.

15.^

‘Millions in Pakistan without Digital ID Card: Rights Activists’ (Al Jazeera, 26 July 2022) <https://www.aljazeera.com/news/2022/7/26/millions-in-pakistan-without-digital-id-card-rights-activists> accessed 23 July 2025.

16.^

Ghulam Shabir Arain, ‘Pakistan Law Proposed to Transform Digital Identity System and Governance’ (Biometric Update, 17 December 2024) <https://www.biometricupdate.com/202412/pakistan-law-proposed-to-transform-digital-identity-system-and-governance> accessed 23 July 2025; ‘Millions in Pakistan without Digital ID Card: Rights Activists’ (n 15).

18.^

Rida Qadri, ‘When Databases Get to Define Family’ [2021] Wired <https://www.wired.com/story/pakistan-digital-database-family-design/> accessed 23 July 2025.

19.^

Qadri (n 18).

20.^

Ratnadeep Choudhary Mondal Manisha, ‘Aadhaar vs CNIC: How Different Are India and Pakistan’s ID Systems?’ (ThePrint, 24 June 2018) <https://theprint.in/india/governance/aadhaar-vs-cnic-how-different-are-india-and-pakistans-id-systems/73812/> accessed 23 July 2025; ‘Millions in Pakistan without Digital ID Card: Rights Activists’ (n 15).

21.^

‘Millions in Pakistan without Digital ID Card: Rights Activists’ (n 15).

22.^

Waqas and Khan (n 14).

23.^

Waqas and Khan (n 14).

25.^

Qadri (n 18).

26.^

Qadri (n 18).; Zehra Hashmi, ‘Thinking with a Database | Platypus’ (Platypus, 6 May 2021) <https://blog.castac.org/2021/05/thinking-with-a-database/> accessed 23 July 2025.

27.^

‘Pakistan Launches First Digital Identity Card System Through NADRA’ (n 9); ‘Islamic Republic of Pakistan: Digital Economy Enhancement Project’ (The World Bank 2025) P174402 <https://documents1.worldbank.org/curated/en/099011525100510857/pdf/P174402-c583176c-1d59-45ef-a8f4-a906c8730eca.pdf>.

29.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (Amnesty International 2025) TG ASA 33/2025.6504 <https://www.amnesty.org/en/wp-content/uploads/2025/04/ASA3392442025ENGLISH.pdf>.

30.^

Frank Hersey, ‘Pakistan Gymnastics Team Fights for ID in Case Which Could Bring It to 3 Million’ (Biometric Update, 8 November 2021) <https://www.biometricupdate.com/202111/pakistan-gymnastics-team-fights-for-id-in-case-which-could-bring-it-to-3-million> accessed 23 July 2025.

31.^

‘All You Need To Know About Alien Registration Card In Pakistan’ (ACCO PAKISTAN, 20 August 2021) <https://acco.com.pk/all-you-need-to-know-about-alien-registration-card-in-pakistan/> accessed 22 July 2025.

32.^

‘NADRA, PBS Sign MoU to Use Data Domestically, Internationally’ (Ministry of Information and Broadcasting (Government of Pakistan), 22 October 2024) <https://moib.gov.pk/News/64988> accessed 16 June 2025.

33.^

‘NADRA, PBS Sign MoU to Use Data Domestically, Internationally’ (n 37).

34.^

Ghulam Shabir Arain, ‘NADRA Technologies Exporting Pakistan Digital ID to the World’ (Biometric Update, 13 March 2025) <https://www.biometricupdate.com/202503/nadra-technologies-exporting-pakistan-digital-id-to-the-world> accessed 16 June 2025.

35.^

Arain (n 39).

36.^

Arain (n 39).

37.^

‘NADRA, PBS Sign MoU to Use Data Domestically, Internationally’ (n 37); Ayang Macdonald, ‘NADRA and NIRA Work to Advance Somalia’s Digital Identification Program’ (Biometric Update, 18 March 2025) <https://www.biometricupdate.com/202503/nadra-and-nira-work-to-advance-somalias-digital-identification-program> accessed 16 June 2025.

38.^

Digital Nation Pakistan Act (2025); ‘Pakistan Launches First Digital Identity Card System Through NADRA’ (n 9).

39.^

Digital Nation Pakistan Act (2025) Preamble; Editorial, ‘Digital ID Bill’ (DAWN.COM, 17 December 2024) <https://www.dawn.com/news/1879244> accessed 4 August 2025.

40.^

Digital Nation Pakistan Act (2025); Nadir Guramani, ‘Digital Nation Pakistan Bill Tabled in National Assembly’ (Dawn, 16 December 2024) <https://www.dawn.com/news/1879138> accessed 21 June 2025.

41.^

Digital Nation Pakistan Act (2025) Chapter 2-4.

42.^

Digital Nation Pakistan Act (2025) Chapter 3, Article 8.

43.^

Digital Nation Pakistan Act (2025) Chapter 2, Article 5(a).

44.^

Digital Nation Pakistan Act (2025) Chapter 4, Article 10.

45.^

Digital Nation Pakistan Act (2025) Chapter 1, Article 2(i).

46.^

Ayang Macdonald, ‘New NADRA ID Card Rules Redefine Biometrics, Mandate Birth Registration with Union Councils | Biometric Update’ (23 June 2025) <https://www.biometricupdate.com/202506/new-nadra-id-card-rules-redefine-biometrics-mandate-birth-registration-with-union-councils> accessed 23 July 2025.

47.^

https://www.nadra.gov.pk/e-services/grievance-redressal-mechanism/; ‘NADRA Launches Centralized Complaint Management System for Citizens’ (National Database and Registration Authority, Ministry of Interior, Pakistan, 8 February 2022) <https://www.nadra.gov.pk/mediaRelease/nadra-launches-centralized-complaint-management-system-for-citizens-ba50a4ff> accessed 5 August 2025.

48.^

‘Data Protection and Privacy Legislation Worldwide | UN Trade and Development (UNCTAD)’ <https://unctad.org/page/data-protection-and-privacy-legislation-worldwide> accessed 16 July 2025; ‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

49.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

50.^

‘Data Protection and Privacy Legislation Worldwide | UN Trade and Development (UNCTAD)’ (n 53).

51.^

Digital Nation Pakistan Act (2025) Chapter 8, Article 23.

52.^

Digital Nation Pakistan Act (2025) Chapter 8, Article 29.

53.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

54.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

56.^

Editorial (n 44).

57.^

Iftikhar A Khan, ‘2.7m Citizens’ Data Compromised over Five Years, Probe Finds’ (DAWN.COM, 27 March 2024) <https://www.dawn.com/news/1824026> accessed 5 August 2025.

58.^

Editorial (n 62); Majid Burfat, ‘Digital Pakistan: A Leap Forward Or A Step Into Surveillance?’ (Daily Parliament Times, 30 January 2025) <https://www.dailyparliamenttimes.com/2025/01/30/digital-pakistan-a-leap-forward-or-a-step-into-surveillance/> accessed 5 August 2025.

59.^

‘Paving a Digital Road to Hell?: A Primer on the Role of the World Bank and Global Networks in Promoting Digital ID’ (Center for Human Rights & Global Justice - NYU School of Law 2022) <https://chrgj.org/2022-06-paving-digital-road-to-hell/>.

60.^

Identification for Development (ID4D) 2020 Annual Report (English). Identification for Development Washington, D.C. : World Bank Group. http://documents.worldbank.org/curated/en/625371611951876490

61.^

Ratnadeep Choudhary Mondal Manisha, ‘Aadhaar vs CNIC: How Different Are India and Pakistan’s ID Systems?’ (ThePrint, 24 June 2018) <https://theprint.in/india/governance/aadhaar-vs-cnic-how-different-are-india-and-pakistans-id-systems/73812/> accessed 23 July 2025; ‘Millions in Pakistan without Digital ID Card: Rights Activists’ (n 15).

62.^

Waqas and Khan (n 14).

63.^

Qadri (n 18).

64.^

Gaity Khan, ‘Society: The Prawn Peelers of Machhar Colony’ (DAWN.COM, 4 November 2018) <https://www.dawn.com/news/1443447> accessed 5 August 2025.

65.^

Khan (n 75).

66.^

Burfat (n 63).

67.^

Without a Trace - Tahera Hasan video

68.^

NADRA, ‘Pakistan Shares Its Progress and Vision on CRVS at Ministerial Conference in Bangkok’ (National Database and Registration Authority, Ministry of Interior, Pakistan, 27 June 2025) <https://www.nadra.gov.pk/mediaRelease/pakistan-shares-its-progress-and-vision-on-crvs-at-ministerial-conference-in-bangkok-31a1069e> accessed 4 August 2025.

69.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

70.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

71.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

72.^

‘Amnesty International Recommendations for Rights-Respecting Artificial Intelligence and Digital Nation Acts’ (n 30).

73.^

Burfat (n 63).

74.^

Burfat (n 63).