New PTA IoT Framework Brings Stricter Compliance

The Pakistan Telecommunication Authority (PTA) has tightened regulations for smart devices by making IoT gateway registration mandatory and enforcing strict data localisation, ensuring that sensitive IoT data remains within Pakistan under a revised regulatory framework.

Under the updated Regulatory Framework for Short Range Devices (SRD) and Terrestrial IoT Services v1.4, all Low Power Wide Area Network (LPWAN) operators must register every IoT gateway with PTA. The framework clearly prohibits storing IoT data outside Pakistan without prior approval and allows PTA to immediately suspend services on national security grounds.

Pakistan’s IoT ecosystem has expanded rapidly across sectors such as utilities, transport, agriculture, and public safety. With growing reliance on connected devices, regulators have increased oversight to address data security, network control, and national interest concerns. The revised framework strengthens PTA’s supervisory role over long-range IoT deployments.

LPWAN licensees must submit updated gateway lists twice a year and route backend IoT traffic through PTA licensed Local Access Providers. IoT operations on shared spectrum will continue only on a secondary, non-interference basis. Licenses will now be issued under the Class Value-Added Services (CVAS) regime for five years, renewable under federal policy, with mandatory service commencement within one year.

Cellular Mobile Operators and Local Loop licensees can offer IoT services in approved LPWAN bands without a separate license, subject to PTA approval. Mission-critical IoT services linked to public safety, utilities, and transport will only operate on dedicated or licensed spectrum. To encourage innovation, PTA has also allowed non-commercial IoT trials for up to six months with limited devices, subject to inspection.

“The revised framework ensures stronger data protection, regulatory oversight, and secure growth of IoT services in Pakistan,” the Authority stated.