Integrated Border Management System (IBMS)
Federal Investigation Agency (FIA)
Last reviewed October 2026
Send a correctionWhat it does
IBMS records people entering and leaving Pakistan. Immigration officers of the Federal Investigation Agency use it at airports, seaports and land crossings to check travellers against stop lists. FIA says it holds records of more than 206 million travellers since 2003.
Why it matters
Everyone who crosses the border is recorded. FIA says other government bodies query it for travellers' records, and that people are stopped on the basis of its stop list.
Legal basis: none cited by the agency and none found.
On the register because: it holds records on at least a million people or covers the whole country; enrolment is mandatory or cannot practically be avoided; it holds identity, biometric, health, financial, location or communications data; its records are used to decide something about an individual.
How it scores
21.4 out of 100
11.7 to 29.3 if the weights change
The nineteen questions
This record shows what the agency has published. Not found means nothing was found in the places searched on the date checked. It does not mean the safeguard does not exist.
System disclosure
TransparencyDoes the agency say what this system is for and what it is used to decide?
DisclosedThe page also shows stop-list tables. The Annual Administration Report 2024, p. 31, says 3509 cases were intercepted on the basis of the stop-list.
Show evidence
In the agency's words:
to keep an eye on all incoming and outgoing international travelers ... to support Law Enforcement Agencies (LEAs) & Intelligence Agencies (IAs) in fight against terrorism
Checked 8 October 2026. Saved copy.
Does the agency cite the law, rule or notification this system runs under?
DisclosedStatutes cited by name and year on the system's own page. Whether they actually authorise the database is a legal question the index does not judge.
Show evidence
In the agency's words:
on the basis of FIA Act 1974 and Foreigners Registration Act 1964
Checked 8 October 2026. Saved copy.
Does the agency list the kinds of personal data this system holds?
Partly disclosedArrival and departure records are mentioned; no list of the fields held (passport data, photographs, biometrics).
Show evidence
In the agency's words:
Database of more than 206 million travelers based on arrival / departure since 2003.
Checked 8 October 2026. Saved copy.
Is there a named office or officer responsible for the data in this system, with contact details?
Partly disclosedGeneral FIA contact only. No named office or officer for IBMS data.
Show evidence
In the agency's words:
Email: complaints@fia.gov.pk ... Helpline: 051-111-345-786 & 1991
Checked 8 October 2026. Saved copy.
Flows and sharing
TransparencyDoes the agency say which other public bodies receive or can query this data?
DisclosedAnnual Administration Report 2024. The IBMS page separately lists integration with the Financial Monitoring Unit.
Show evidence
In the agency's words:
p. 31: IBMS / FIA is pioneer in real time data sharing through API's with different Government [bodies]; listed: Pakistan Online Visa System (MOI / NADRA), Currency Declaration System (Pakistan Customs), Device Identification Registration Blocking System (PTA / FBR), Bureau of Emigration & Overseas Employment, E-Passport (Passport Office), Punjab Police, Frontier Works Organization
Checked 8 October 2026. Saved copy.
Does the agency name the companies or outside bodies that build or run this system?
Not foundTender notices are published but no contractor is named.
Where we looked
fia.gov.pk/ibms (none; says only 'indigenously developed' in the 2024 report); fia.gov.pk/tenders (18 IBMS tenders listed, no vendor or award named); Annual Administration Report 2024. Checked 8 October 2026.
Does the agency say where the data is stored and whether any of it leaves Pakistan?
Not foundWhere we looked
fia.gov.pk/ibms; fia.gov.pk/privacy; Annual Administration Report 2024; fia.gov.pk/tenders (data-centre cooling tenders imply an in-house data centre but nothing states where data is held). Checked 8 October 2026.
Accountability records
TransparencyHas the agency named an official who answers information requests, and said how to file one?
Partly disclosedThe request form and cost schedule are published. The officer's notification is an image file that could not be read by machine.
Show evidence
In the agency's words:
Public Information Officer under the Right of Access to Information Act, 2017 [link to notification]; RTI Request Form under Right of Access to Information Act 2017; Schedule of Costs
Checked 8 October 2026. Saved copy.
Are audit, evaluation or performance reports that cover this system published?
Partly disclosedAnnual Administration Report 2024 reports IBMS activity figures; it does not assess the system. The 2025 report (fia.gov.pk/files/tickers/416429854.pdf) timed out and was not read.
Show evidence
In the agency's words:
p. 31: IBMS Directorate's is maintaining this data which has touched the figure of 21,114,039 travelers. ... 3509 cases have been intercepted at different IBMS sites on the basis of Stop-list.
Checked 8 October 2026. Saved copy.
Has a privacy or data protection impact assessment of this system been published?
Not foundWhere we looked
fia.gov.pk/ibms; fia.gov.pk/privacy; fia.gov.pk/laws; Annual Administration Report 2024. Checked 8 October 2026.
Rules on use
SafeguardsIs there a privacy notice or data policy that covers this system?
Partly disclosedWebsite and mobile-app privacy policies only. Neither mentions immigration or IBMS records.
Show evidence
In the agency's words:
We do not collect any information about you unless you choose to provide that information.
Checked 8 October 2026. Saved copy.
Does the agency say how long records in this system are kept?
Not foundWhere we looked
fia.gov.pk/privacy and /app_privacy (retention stated for the mobile app only); fia.gov.pk/ibms; fia.gov.pk/laws (no retention rule listed); Annual Administration Report 2024. Checked 8 October 2026.
Does the agency state limits on using this data for anything beyond its stated purpose?
Not foundWhere we looked
fia.gov.pk/ibms; fia.gov.pk/privacy (website data only); fia.gov.pk/laws; SOPs listed on the laws page were not opened. Checked 8 October 2026.
Individual rights
SafeguardsDoes the agency explain how a person can see their own record?
Not foundWhere we looked
fia.gov.pk/ibms; fia.gov.pk/faq (no entry on obtaining travel history); fia.gov.pk/immigration_w. Checked 8 October 2026.
Does the agency explain how a person can get an error in their record corrected?
Not foundWhere we looked
fia.gov.pk/ibms; fia.gov.pk/faq; fia.gov.pk/immigration_w; fia.gov.pk/privacy (correction offered for website-submitted information only). Checked 8 October 2026.
Is there a complaint route for misuse of this data, with a stated response time?
Partly disclosedComplaint routes exist (desk, portal, email, helpline). None mentions data and none states a response time.
Show evidence
In the agency's words:
Complaints against the staff are being received at the Desk ... the same is resolved then and there by the concerned staff.
Checked 8 October 2026. Saved copy.
Can a person find out who has accessed their record?
Not foundWhere we looked
fia.gov.pk/ibms; fia.gov.pk/privacy; fia.gov.pk/faq. Checked 8 October 2026.
Security and oversight
SafeguardsHas the agency committed to telling people about data breaches, or published a record of past ones?
Not foundWhere we looked
fia.gov.pk/privacy and /app_privacy (no breach clause); fia.gov.pk/press-pub not opened. Checked 8 October 2026.
Does the agency say who independently audits the security or data handling of this system, and how often?
Not foundWhere we looked
fia.gov.pk/ibms; Annual Administration Report 2024 (no audit or certification); fia.gov.pk/privacy mentions 'security monitoring, auditing and encryption' for the website only. Checked 8 October 2026.
Agency reply
Not yet sent to the agency.
Sources
Official pages and documents cited on this record.