Pakistan Data Observatory
All systems
PDO-03

Passport issuance system

Directorate General of Immigration and Passports (Ministry of Interior)

Last reviewed October 2026

Send a correction

What it does

This is the system that issues Pakistani passports. An applicant's photograph, fingerprints and identity details are taken at a passport office and checked against official lists before a passport is printed.

Why it matters

Nobody can get a passport without handing over fingerprints and a photograph, and applicants are checked against exit-control and blacklist records.

Legal basis: Passports Act, 1974 (XX of 1974).

On the register because: it holds records on at least a million people or covers the whole country; it holds identity, biometric, health, financial, location or communications data; its records are used to decide something about an individual.

How it scores

31.7 out of 100

16.4 to 45.5 if the weights change

Transparency
36.1
System disclosure
75.0
Flows and sharing
16.7
Accountability records
16.7
Safeguards
27.8
Rules on use
33.3
Individual rights
50.0
Security and oversight
0.0
3 disclosed 8 partly disclosed 8 not found

The nineteen questions

This record shows what the agency has published. Not found means nothing was found in the places searched on the date checked. It does not mean the safeguard does not exist.

System disclosure

Transparency

Does the agency say what this system is for and what it is used to decide?

Disclosed

The passport policy page states what the document is for; the process page states what the system records and checks.

Source: www.dgip.gov.pk/passport/process.php
Show evidence

In the agency's words:

The applicant will go through the following steps ... Capturing of Photograph + Token Issuance with QR Code. Biometrics/Finger Prints capture. Data Entry. Verification as per Office Record. (ECL/BL). Interview and Decision by Assistant Director.

Checked 8 October 2026. Saved copy.

Does the agency cite the law, rule or notification this system runs under?

Disclosed

The Act and Rules are published on the site's downloads page.

Source: www.dgip.gov.pk/downloads/PassportRules-2021.pdf
Show evidence

In the agency's words:

S.R.O. 245(I)/2022. In exercise of the powers conferred by section 13 of the Passports Act, 1974 (XX of 1974) read with section 3 of the Foreigners Act, 1946 (XXXI of 1946) ... Passports Rules, 2021

Checked 8 October 2026. Saved copy.

Does the agency list the kinds of personal data this system holds?

Partly disclosed

Describes what the chip holds and, on the process page, what is captured (photograph, CNIC number, fingerprints). No list of what the passport database holds.

Source: www.dgip.gov.pk/eServices/epassport.php
Show evidence

In the agency's words:

The chip contains data that will verify the passport holder's identity and will include the biometrics of the passport holder, the personal data found on the data page of the passport, a unique identification number and a digital signature.

Checked 8 October 2026. Saved copy.

Is there a named office or officer responsible for the data in this system, with contact details?

Partly disclosed

A named head of software with a telephone number. The title does not say the post is responsible for passport records or applicants' data, so this is coded partly disclosed under reading rule R-1.

Source: www.dgip.gov.pk/contactus/contact.php
Show evidence

In the agency's words:

Director (Software Application and Production) Mr. Muhammad Abdul Khaliq 9107016

Checked 8 October 2026. Saved copy.

Flows and sharing

Transparency

Does the agency say which other public bodies receive or can query this data?

Partly disclosed

The Rules name IBMS and refer doubtful cases to 'the concerned security agency'; the process page mentions checks against ECL and blacklist records. No list of bodies with access.

Source: www.dgip.gov.pk/downloads/PassportRules-2021.pdf
Show evidence

In the agency's words:

r.22(4), p. 12: such passport shall be inactivated ... and placed on the Integrated Border Management System (IBMS) for refusal of immigration services.

Checked 8 October 2026. Saved copy.

Does the agency name the companies or outside bodies that build or run this system?

Not found
Where we looked

dgip.gov.pk tenders page (six notices, no contractor named); e-Passport page; contact page. Checked 8 October 2026.

Does the agency say where the data is stored and whether any of it leaves Pakistan?

Not found
Where we looked

dgip.gov.pk Terms of Use; e-Passport page; Passports Rules 2021. Checked 8 October 2026.

Accountability records

Transparency

Has the agency named an official who answers information requests, and said how to file one?

Partly disclosed

The officer is named with a number. Nothing explains how to file a request.

Source: www.dgip.gov.pk/contactus/contact.php
Show evidence

In the agency's words:

Public Information Officer: Mr. Fiaz Hussain (Director) Contact No. : 051-9107075

Checked 8 October 2026. Saved copy.

Are audit, evaluation or performance reports that cover this system published?

Not found

The home page carries an image titled '2025 performance'.

Where we looked

dgip.gov.pk sitemap (no reports section); About us; Office Orders not opened. Checked 8 October 2026.

Has a privacy or data protection impact assessment of this system been published?

Not found
Where we looked

dgip.gov.pk sitemap; Terms of Use; Passports Rules 2021. Checked 8 October 2026.

Rules on use

Safeguards

Is there a privacy notice or data policy that covers this system?

Partly disclosed

Website terms only. They do not mention passport applications or the passport database.

Source: www.dgip.gov.pk/home/terms.php
Show evidence

In the agency's words:

When using this website, you are agreeing to all of these terms on how we collect and store your personal data. ... Any personally identifying information will not be disclosed to any third party.

Checked 8 October 2026. Saved copy.

Does the agency say how long records in this system are kept?

Partly disclosed

A retention period is stated for the Passport Control List only. Nothing on how long application and biometric records are kept.

Source: www.dgip.gov.pk/downloads/PassportRules-2021.pdf
Show evidence

In the agency's words:

r.22, p. 11: normal period of retaining a person on the PCL is five years.

Checked 8 October 2026. Saved copy.

Does the agency state limits on using this data for anything beyond its stated purpose?

Not found
Where we looked

Passports Rules 2021 (keyword search: confidential, disclose, share); Terms of Use (website data only). Checked 8 October 2026.

Individual rights

Safeguards

Does the agency explain how a person can see their own record?

Partly disclosed

An applicant can track an application. No way to see the record held.

Source: www.dgip.gov.pk/updates/sms-passport-tracking-system.php
Show evidence

In the agency's words:

SMS based Passport Tracking Intimation System

Checked 8 October 2026. Saved copy.

Does the agency explain how a person can get an error in their record corrected?

Disclosed
Source: www.dgip.gov.pk/passport/ordinary-passport.php#Modification
Show evidence

In the agency's words:

The applicant can apply for a passport to modify his/her name, father name, date of birth etc. For it, he has to get his CNIC/NICOP revise/modify first.

Checked 8 October 2026. Saved copy.

Is there a complaint route for misuse of this data, with a stated response time?

Partly disclosed

Helpline, email and portal. No response time. The Rules give an appeal and periodic review for people placed on the Passport Control List.

Source: www.dgip.gov.pk/contactus/contact.php
Show evidence

In the agency's words:

Please choose one of the following methods of communication for your queries & complaints ... or you can register complaint through Pakistan Citizen's Portal.

Checked 8 October 2026. Saved copy.

Can a person find out who has accessed their record?

Not found
Where we looked

Terms of Use; Passports Rules 2021; FAQs. Checked 8 October 2026.

Security and oversight

Safeguards

Has the agency committed to telling people about data breaches, or published a record of past ones?

Not found
Where we looked

Terms of Use; sitemap; home-page notices. Checked 8 October 2026.

Does the agency say who independently audits the security or data handling of this system, and how often?

Not found
Where we looked

e-Passport page (says the document complies with ICAO standards, which concerns the booklet, not an audit of the system); Terms of Use; tenders. Checked 8 October 2026.

Agency reply

Not yet sent to the agency.

Sources

Official pages and documents cited on this record.

  1. https://www.dgip.gov.pk/passport/process.php
  2. https://www.dgip.gov.pk/downloads/PassportRules-2021.pdf
  3. https://www.dgip.gov.pk/eServices/epassport.php
  4. https://www.dgip.gov.pk/contactus/contact.php
  5. https://www.dgip.gov.pk/home/terms.php
  6. https://www.dgip.gov.pk/updates/sms-passport-tracking-system.php
  7. https://www.dgip.gov.pk/passport/ordinary-passport.php#Modification