This directive, issued by Nepal’s Ministry of Communication and IT, outlines mandatory data protection standards for public agencies. It requires all institutions to encrypt sensitive information and obtain informed consent before collecting personal data. The directive also introduces a National Data Protection Office to oversee compliance. Each ministry must submit annual privacy audits, ensuring transparency and accountability. The policy marks a major step toward safeguarding citizens’ digital rights in the era of e-governance.
