According to the law firm Hunton Andrews Kurth, Pakistan's Ministry of Information Technology and Telecommunication has recently introduced a new draft Personal Data Protection Bill. The ministry had also launched a public consultation, which ended on May 15, 2020. The legislation applies to "any person who processes" or "has control over or authorizes the processing of" any personal data, if the data subject, the controller or processor are located in Pakistan, would establish new requirements related to the processing of personal data, as well as penalties for violating the law.