In brief
Nepal has 3 recorded AI policy instruments, 1 of them binding and 1 in force. National AI policy adopted (2025); no binding AI-specific law; privacy and electronic-transaction laws apply. Regulators include Ministry of Communication and Information Technology (MoCIT), Nepal Law Commission. Nepal is at an early stage of AI governance.
- Type
- Country
- Region
- Asia
- Binding instruments
- 1
- In force
- 1
- Obligations recorded
- 2
- Regulators
- Ministry of Communication and Information Technology (MoCIT), Nepal Law Commission
- Verification
- Verified against the official source 26 Sep 2026
Overview
Nepal is at an early stage of AI governance. The Ministry of Communication and Information Technology (MoCIT) published a concept paper on the use and practice of AI in 2024 and the Council of Ministers approved a National AI Policy in 2025 that sets objectives for AI development, ethics, data and institutional arrangements. There is no AI-specific legislation. Applicable law comes from the Electronic Transactions Act 2063 (2008), the Individual Privacy Act 2075 (2018) and its regulations, the National Cyber Security Policy 2080 (2023) and sector rules, alongside the Digital Nepal Framework.
What is the current regulatory status?
National AI policy adopted (2025); no binding AI-specific law; privacy and electronic-transaction laws apply. Source certainty for policy documents is medium because official English-language texts and stable document URLs are limited; every record here must be verified against MoCIT publications.
Binding rules versus guidance
Binding: Electronic Transactions Act 2063, Individual Privacy Act 2075 and the Individual Privacy Regulation 2077, sector rules from Nepal Rastra Bank and the Nepal Telecommunications Authority. Guidance / policy: National AI Policy 2082 (2025), the 2024 AI concept paper, Digital Nepal Framework 2019, National Cyber Security Policy 2080.
Key policy instruments
National Artificial Intelligence Policy, 2082 (2025) — Nepal
Nepal's National AI Policy sets the government's direction for developing and using artificial intelligence. Based on the published summaries, it aims to build AI infrastructure and skills, promote ethical and responsible AI, strengthen data governance, establish institutional arrangements for AI oversight, and prepare legal and regulatory measures. It is a policy framework, not a law, and does not itself create enforceable obligations on private organisations.
Adopted 1 Aug 2025
Verified against the official source 26 Sep 2026 · reviewed by AI Policy Tracker (a factual check against the official source, not a legal review or legal advice)
Official source
Nepal
·
Act / statute
In force
Binding
Individual Privacy Act, 2075 (2018) — Nepal
The Individual Privacy Act 2075 gives effect to the constitutional right to privacy in Nepal. It regulates the collection, storage, processing, use and disclosure of personal information by public bodies and private entities, requires consent for collection and use of personal data subject to exceptions, restricts sensitive data, and provides remedies and penalties. It is the main binding law affecting AI systems that process personal data in Nepal. The Individual Privacy Regulation 2077 (2020) provides implementing rules.
In force 18 Sep 2018
Verified against the official source 26 Sep 2026 · reviewed by AI Policy Tracker (a factual check against the official source, not a legal review or legal advice)
Official source
Nepal
·
Consultation
Under consultation
A concept paper prepared by a ministry-appointed committee that surveys the state of AI use in Nepal, its opportunities and risks, and the gaps in existing law and infrastructure. It recommends formulating a national AI policy and strategy, addressing data protection, privacy and cybersecurity, and building governance structures. The paper was published for public suggestions and is cited in the 2025 policy as its precursor.
Adopted 5 Jul 2024
Verified against the official source 26 Sep 2026 · reviewed by AI Policy Tracker (a factual check against the official source, not a legal review or legal advice)
Official source
Instruments at a glance
Native-language names are shown where the record carries one; a blank means the source is in English or the name is not yet recorded.
Upcoming deadlines
Subscribe to these dates in your calendar: Nepal feed · how it works
No scheduled future dates recorded. Past milestones are listed on each policy page.
Current priorities
Implementing the National AI Policy's institutional arrangements, drafting AI-related legislation and standards, data governance and digital public infrastructure, and capacity building.
Applicable sectors, use cases and obligation areas
How to use this information
- Treat the Individual Privacy Act 2075 as the main binding constraint for AI using personal data in Nepal.
- Use the National AI Policy to anticipate future regulation and public-sector procurement expectations.
- Confirm every policy claim against the MoCIT website, and note the Nepali calendar (Bikram Sambat) dates used in official documents.
Frequently asked questions
- Does Nepal have an AI law or policy?
- Nepal has a National AI Policy approved by the Council of Ministers in 2025 and a 2024 concept paper from MoCIT, but no AI-specific legislation. Existing privacy, electronic-transaction and cyber-security law applies.
- Does Nepal have an AI law?
- Yes. 1 binding instrument is in force: Nepal Privacy Act 2075.
- Who regulates AI in Nepal?
- Ministry of Communication and Information Technology (MoCIT) (ICT and AI policy lead); Nepal Law Commission (Official repository of Acts and regulations).
- What is the status of AI regulation in Nepal?
- National AI policy adopted (2025); no binding AI-specific law; privacy and electronic-transaction laws apply. Source certainty for policy documents is medium because official English-language texts and stable document URLs are limited; every record here must be verified against MoCIT publications.
- What is binding and what is only guidance in Nepal?
- Binding: Electronic Transactions Act 2063, Individual Privacy Act 2075 and the Individual Privacy Regulation 2077, sector rules from Nepal Rastra Bank and the Nepal Telecommunications Authority. Guidance / policy: National AI Policy 2082 (2025), the 2024 AI concept paper, Digital Nepal Framework 2019, National Cyber Security Policy 2080.
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.
