Pakistan: passenger data record
- Data protection law
- None enacted. Personal Data Protection Bill drafts dated July 2018, April 2020 and May 2023 1
- Data protection authority
- None. A June 2026 MoITT policy refers to an authority to be designated under a future law 2
- Agency that receives API/PNR
- Pakistan Customs, through the Global Travelers Assessment System, per a 20 November 2019 release 8. FIA access not confirmed 3
- API/PNR status
- Live at Customs at seven airports per the 20 November 2019 release 8. The FIA lists no access to APIS as a gap (undated page) 3
- Biometric collection at entry
- Not confirmed. NADRA listed biometric verification as an IBMS function in 2022 5. The FIA lists manual clearance instead of biometric processing as a gap 3
- Date checked
- 21 October 2026
Data protection law status
MoITT's legislation page lists three Personal Data Protection Bill drafts, dated 2 July 2018, 9 April 2020 and 1 May 2023 1. Each is marked draft and no approved version is listed 1.
MoITT's Data Governance Policy 2026, dated June 2026, takes effect on gazette notification and its gazette reference is marked pending Cabinet approval 2. Clause 11.3 says the policy will be updated to align with the Personal Data Protection Law once that law is enacted 2. Clause 16.9 leaves supervision of personal data processing to the authority designated under that law 2. Clause 8.2 says restricted, confidential and personal data are to be hosted, stored and processed within Pakistan 2.
FIA Immigration Wing and IBMS
The FIA says its Immigration Wing was established in 1975 3. Its listed functions include enforcing the Exit Control List and the Provisional National Identification List, examining travel documents of arriving and departing passengers, and issuing visas on arrival at designated points 3.
The FIA's IBMS page says the system tracks all incoming and outgoing international travellers under the FIA Act 1974 and the Foreigners Registration Act 1964 4. It took over the database of the earlier PISCES system, which was set up under the FIA in 2002 with partial assistance of the US government 4. The page reports a database of more than 206 million travellers since 2003 4.
The two FIA pages give different counts of entry and exit points. The Immigration Wing page lists 13 airports, 5 land routes, 4 seaports and 2 railway stations 3. The IBMS page lists 14 airports, 7 land borders, 4 sea ports and 2 railway stations 4. Neither page is dated.
Interior Minister Rana Sanaullah Khan inaugurated the FIA's Integrated Border Management System, described as integrated with other agencies including NADRA, as reported by Aamir Javed Butt for ARY News on 9 August 2023 10.
NADRA's role
A 2022 ICAO TRIP Symposium presentation by the then NADRA chairman, Muhammad Tariq Malik, said IBMS was deployed at all airports, land ports and sea ports of Pakistan 5. It reported 218,563,460 travellers processed through IBMS 5. It listed biometric verification, stop-list checks and document authentication as IBMS functions, with a link to the Interpol stolen passports database 5. It showed advance passenger information as a data feed to the IBMS central server 5. The presentation does not state who built IBMS 5.
API and PNR
The Federal Board of Revenue said on 20 November 2019 that Pakistan Customs had launched the Global Travelers Assessment System, which uses API and PNR data to profile travellers, at seven major airports 8.
On 20 and 21 March 2023 Pakistan Customs hosted a national consultation on API and PNR with the UN Countering Terrorist Travel Programme, covering the goTravel system 6. More than 30 representatives of national agencies took part 6. The UN Counter-Terrorism Committee Executive Directorate said the findings would inform a national API/PNR road map, with UNOCT to coordinate technical assistance once Pakistan accepts it 7.
The FIA Immigration Wing page lists lack of access to the IATA Advance Passengers Information System as a gap 3.
E-gates
Interior Minister Mohsin Raza Naqvi chaired a meeting on a one-window airport clearance plan, as reported by Iftikhar A. Khan in Dawn on 23 April 2026 9. E-gates using biometric passport scanners and facial recognition are planned, likely starting at Islamabad International Airport 9. They are to be linked to the FIA exit control list, passenger name records and Interpol databases 9.
Chronology
| Date | Event |
|---|---|
| 20 November 2019 | Customs announces API/PNR profiling system at seven airports 8 |
| 20 to 21 March 2023 | UN API/PNR national consultation in Islamabad 6 |
| 1 May 2023 | Latest Personal Data Protection Bill draft listed by MoITT 1 |
| 9 August 2023 | ARY News reports IBMS inauguration by the Interior Minister 10 |
| 23 April 2026 | Dawn reports e-gate plan with facial recognition 9 |
| June 2026 | MoITT Data Governance Policy 2026 pending Cabinet approval 2 |
Common questions
Does Pakistan have a data protection law?
No enacted law. MoITT lists bill drafts from 2018, 2020 and 2023, all marked draft 1.
Who keeps Pakistan's border crossing records?
The FIA Immigration Wing keeps travel records in IBMS 3. NADRA presented IBMS at an ICAO symposium in 2022 5.
Does Pakistan receive API and PNR data?
Pakistan Customs said in November 2019 that its profiling system used API and PNR data at seven airports 8. The FIA lists lack of access to APIS as a gap 3.
Are there e-gates at Pakistani airports?
E-gates with facial recognition were planned as of 23 April 2026, as reported by Dawn 9.
Rules and fees change. Check the official site linked above before you apply or pay. Spotted an error? Email hello@passengerdataexplained.org with the official link.
Sources
- Ministry of IT and Telecom: Legislations, Personal Data Protection Bill drafts (checked 21 October 2026)
- Ministry of IT and Telecom: Data Governance Policy 2026 (June 2026)
- Federal Investigation Agency: Immigration Wing (undated, checked 21 October 2026)
- Federal Investigation Agency: Integrated Border Management System (undated, checked 21 October 2026)
- ICAO TRIP Symposium 2022: Digital Dividends of Pakistan's ID Ecosystem, NADRA presentation (2022)
- Press Information Department: PR No. 134, FBR hosts national consultation on API and PNR (20 March 2023)
- UN Counter-Terrorism Committee Executive Directorate: Countering Terrorist Travel Programme national consultation mission to Pakistan (March 2023)
- Federal Board of Revenue: Pakistan Customs launches passenger profiling system (20 November 2019)
- Dawn: Airports moving towards one-window clearance, by Iftikhar A. Khan (23 April 2026)
- ARY News: Rana Sanaullah inaugurates FIA's Integrated Border Management System, by Aamir Javed Butt (9 August 2023)
Related
- Advance Passenger Information (API) explained
What API data is, which fields airlines send, who receives it, the legal basis, how long it is kept, and examples from four jurisdictions.
- Passenger Name Record (PNR) data explained
What PNR data is, the 19 EU data elements, who sends and receives it, the legal basis, retention rules and the 2022 EU Court of Justice ruling.
- Watch-list matching of passenger data
How API and PNR data are compared with INTERPOL, national and UN lists, what happens after a hit, how false matches are handled and how to seek redress.
- Biometric data at borders
Which fingerprints and facial images border agencies collect from travellers, the legal basis, who holds the records and how long they are kept.
- UN Security Council Resolution 2396 and ICAO Annex 9
What Resolution 2396 (2017) asks of states on API, PNR, watch lists and biometrics, and how ICAO Annex 9 sets the passenger data standards.
- India: passenger data record
Who receives airline passenger data in India, what the DPDP Act 2023 and Rules 2025 say, and how PNR, e-Arrival and Digi Yatra work.
- United Arab Emirates: passenger data record
The UAE personal data law and its exclusions, the UAE Data Office, ICP and GDRFA Dubai, biometric smart gates, and what is published on API and PNR.