Nepal
ModeratePrivacy Act 2018 + Individual Privacy Act 2075
Authority: Nepal Telecommunications Authority (NTA) | Enforcement: partial | Enacted: September 2018
Overview
Nepal's Privacy Act 2018 provides basic data protection provisions. The Individual Privacy Act establishes the right to privacy and data protection principles. Enforcement is limited. The regulatory framework is developing.
14-Topic Coverage
Data Protection Authority
Partially AddressedNTA has some oversight for telecom data. No dedicated DP authority.
Consent Requirements
Fully AddressedConsent required for collection and use of personal data.
Data Subject Rights
Fully AddressedRights to access, correction, and control of personal data under the Privacy Act.
Cross-Border Transfer
Partially AddressedLimited provisions. No comprehensive transfer framework.
Breach Notification
Not AddressedNo mandatory breach notification requirement.
DPO Requirements
Not AddressedNo DPO requirement.
Children's Data
Partially AddressedChild protection laws exist. Limited data-specific provisions.
Penalties & Enforcement
Partially AddressedPenalties under the Privacy Act. Limited enforcement capacity.
Sector-Specific Rules
Partially AddressedNRB financial data rules, telecom regulations.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Partially AddressedSome government data localisation requirements.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedRight to Information Act. Government data protected by various regulations.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Nepal's regulations.
Book a Consultation