New cyber safety ordinance provision clears Digital Security Act defendants

According to the new Cyber Protection Ordinance, any sentence or fine imposed by any court or tribunal under these provisions will be considered null and void

The government has introduced a new provision in the Cyber Protection Ordinance, effectively dismissing all cases filed under the repealed Digital Security Act.

As a result, all individuals convicted or charged under the law will be granted immunity from the charges, according to the Chief Advisor's Special Assistant Faiz Ahmad Taiyeb.

The decision was approved in a meeting of the Advisory Council on Thursday, chaired by Chief Advisor Muhammad Yunus at his office.

The amendment to Section 50 of the Cyber Protection Ordinance includes a new sub-section (4k), which states: “Any ongoing case or investigation under sections 21, 24, 25, 26, 27, 28, 29, 31, or related offences under the Digital Security Act, 2018, will be considered null and void, and no action will be taken against those charged.”

The provision further stipulates that any sentence or fine imposed by a court or tribunal under these sections will be considered annulled.

The Digital Security Act, introduced in 2018 to tackle cybercrime, faced criticism for its repressive provisions. In 2023, it was amended and replaced by the Cyber Security Act, with further revisions made by the interim government, culminating in the new Cyber Protection Ordinance.

After the meeting, said: “All cases under the Digital Security Act of 2018 have been annulled. Those convicted or charged are now free of any liability.”

The Advisory Council also approved two other ordinances, the “Personal Data Protection Ordinance, 2025” and the “National Data Protection Ordinance, 2025”, which are expected to strengthen the protection of citizens' personal data.