The Pakistan Telecommunication Authority (PTA) has introduced stringent regulations for Internet of Things (IoT) devices, mandating the registration of all gateways and emphasising data localisation to ensure information remains securely within Pakistan.
Under Version 1.4 of the revised regulatory framework for Short Range Devices (SRD) and terrestrial IoT services, all Low Power Wide Area Network (LPWAN) licensees are required to register every IoT gateway with the PTA.
The rules prohibit storing IoT data outside Pakistan without prior PTA approval, and in cases of national security concerns, the regulator may immediately suspend services.
The updated framework strengthens oversight of long-range IoT networks. Licensees must submit an operational gateway list twice annually, and back-end traffic must be routed through PTA-approved local access providers.
LPWAN licenses will now be issued under Class Value-Added Services (CVAS) for five years, with services required to launch within one year.
Mission-critical IoT services—such as those related to public safety, utilities, and transportation—will only operate on designated or licensed frequency bands.
The regulations also foster innovation, allowing academia, government, and companies to conduct non-commercial IoT testing for up to six months under PTA supervision.
Experts note that these PTA IoT regulations aim to enhance cybersecurity, protect sensitive data, and maintain control over the rapidly expanding smart device ecosystem within Pakistan.
