Loading...
PTA licensing, DIRBS device verification, 5G guidelines & NTISB compliance
| Regulation | Description | Authority | Reference | |
|---|---|---|---|---|
| PECA 2016 | Electronic crimes — unauthorized access, data theft, cyber terrorism | PTA / FIA | PECA 2016 | |
| PTA 5G Security Guidelines | Security requirements for 5G network deployment | PTA | PTA 5G | |
| DIRBS | Device Identification Registration & Blocking System — IMEI registration | PTA | PTA | |
| NTISB Guidelines | Telco/ISP cybersecurity standards — mandatory compliance | NTISB | NTISB | |
| PTA Licensing | ISP, CVAS, TVAS, and other telecom licenses | PTA | PTA | |
| NTC Security Standards | Government IT procurement security standards | NTC | NTC | |
| STZA | Special Technology Zones — tax holidays and incentives | STZA | STZA |
Most IT companies providing software, SaaS, web hosting, or app development do NOT need a PTA license. PTA licensing is required only if you operate telecom infrastructure or provide connectivity services.
| Your Business | PTA License Required? | Notes |
|---|---|---|
| Software development / SaaS | No | Not a telecom service |
| Web hosting / Cloud services | No | Not a telecom service |
| Mobile app development | No | Unless app provides telecom functionality |
| ISP (Internet Service Provider) | Yes | PTA ISP license required |
| VoIP service for commercial calls | Yes | LDI or Class license required |
| SMS gateway provider | Yes | CVAS or Class license |
| Call center / BPO with outbound calls | Check | VPN registration likely required |
| Corporate VPN for internal use | Register | PTA VPN registration required |
| IoT device manufacturer | Type Approval | PTA type approval for devices with SIM |
Source: PTA — Legislation & Rules | Pakistan Telecommunication (Re-organization) Act, 1996
| License Type | Scope | Who Needs It | Key Requirements | Reference |
|---|---|---|---|---|
| Cellular Mobile (CMO) | Mobile voice + data (4G/5G) | Jazz, Telenor, Zong, Ufone | Auction-based spectrum, PKR billions upfront fees (Federal — PTA), QoS obligations | PTA Act 1996 |
| LDI (Long Distance & International) | International voice/data connectivity | International carriers, VoIP providers | Significant capital, infrastructure, security clearance, annual fees (Federal — PTA) | PTA |
| Local Loop (LL) | Fixed-line services in a local area | Last-mile providers | Physical infrastructure, QoS obligations | |
| Wireless Local Loop (WLL) | Fixed wireless using radio spectrum | Wireless ISPs | Spectrum allocation, QoS standards | |
| ISP (Internet Service Provider) | Internet access to end-users | Internet providers | PTA registration, annual fees, QoS compliance, bandwidth reporting | PTA ISP Licensing Rules |
| DCN (Data Communication Network) | Data transmission networks | Corporate data networks, leased lines, cloud connectivity | Infrastructure requirements, security compliance | |
| CVAS (Class Value Added Services) | Value-added telecom services | IVR, SMS aggregators, call center solutions, telemedicine | PTA registration, lower regulatory burden than individual licenses | |
| TVAS (Telecom Value Added Services) | Specific value-added services | Specific VAS providers | Individual authorization from PTA |
| Scenario | Status | Notes |
|---|---|---|
| Licensed LDI providing VoIP | Legal | Full PTA licensing required, infrastructure-heavy |
| WhatsApp/Skype calls (personal) | Grey area | Generally tolerated for personal, non-commercial use |
| IT company using VoIP internally | Generally OK | Corporate VPN for internal comms — register with PTA |
| IT company deploying VoIP for client app | Requires care | Client must hold PTA license or use licensed carrier APIs |
| IT company offering standalone VoIP service | Illegal without license | Requires PTA LDI or Class license — criminal offense if unlicensed |
| Using licensed carrier APIs (Twilio, etc.) in app | Legal | Recommended approach for IT companies |
PTA's Device Identification, Registration & Blocking System (DIRBS) blocks phones and devices with unregistered IMEIs from operating on Pakistani networks.
| Device Type | DIRBS Registration Required? | Process |
|---|---|---|
| Mobile phones (personal or company) | Yes — mandatory | Register IMEI via PTA portal or SMS (8484) within 60 days |
| IoT devices with SIM | Yes | PTA type approval + DIRBS registration |
| Laptops / tablets without SIM | No | Not applicable |
| Dedicated network equipment | Type approval required | Separate PTA type approval process |
| Company mobile fleet | Yes | Bulk registration available through PTA DIRBS portal |
Bulk Registration: IT companies issuing mobile devices to employees can use PTA's DIRBS bulk registration portal at dirbs.pta.gov.pk.
Source: PTA DIRBS Framework
| Band | Type | Current Use | 5G Potential |
|---|---|---|---|
| 700 MHz | Low-band | TV whitespace / planned for 5G | Wide area coverage |
| 2100 MHz | Mid-band | 3G/4G (Jazz, Zong) | 5G NR deployment |
| 2600 MHz | Mid-band | 4G TDD | 5G NR deployment |
| 3.5 GHz | Mid-band | Planned for 5G | Primary 5G band |
| 26 GHz | mmWave | Not yet assigned | 5G ultra-broadband |
| Equipment Type | Approval Required | Testing |
|---|---|---|
| Mobile phones/devices | Yes | PTA-approved labs or homologation |
| Network equipment (routers, switches) | Yes (if using licensed spectrum) | PTA type approval process |
| IoT devices with SIM | Yes | PTA registration required |
| Wi-Fi routers (standalone) | Generally no | Unless integrated with telecom |
| IT equipment (servers, PCs) | No | Not telecom equipment |
| SATCOM terminals | Yes | PTA + PEMRA authorization |
| Reference | Description | Source |
|---|---|---|
| PECA 2016 | Electronic crimes — unauthorized access, data theft, cyber terrorism | PTA / FIA |
| PTA Act 1996 | Telecom licensing, spectrum, type approval framework | PTA |
| PTA 5G Security Guidelines | Security requirements for 5G network deployment | PTA |
| NTISB Guidelines | Telco/ISP cybersecurity standards — mandatory compliance | NTISB |
| DIRBS Framework | Device registration and IMEI blocking | PTA DIRBS |
| NTC Standards | Government IT procurement security standards | NTC |
| STZA — Act & Rules | Special Technology Zones — tax holidays and incentives | STZA |
| SBP Cyber Shield | Banking sector cybersecurity framework (if serving fintech) | SBP |
| Market Segment | SMP Designee | Remedies Imposed |
|---|---|---|
| Retail Mobile | Jazz, Zong | Accounting separation; cost-oriented pricing; non-discrimination; no anti-competitive bundling |
| Retail Fixed Broadband | PTCL | Cost-oriented access; accounting separation; no cross-subsidization |
| Wholesale Broadband Access | PTCL | Reference access offer; cost-oriented pricing; transparency |
| Wholesale IP Bandwidth | PTCL | Reference offer; non-discriminatory access |
| Wholesale Mobile Interconnection | Jazz | LRIC-based interconnection rates; transparency |
The PECA Amendment 2025 now regulates social media platforms and content. Telecom licensees are explicitly exempted from the definition of "social media platform" under Section 2(xxvib), but must still comply with PTA content blocking directions under Section 37 of PECA 2016.
PECA 2025 »