Nepal Privacy Act 2075: requirements, deadlines and compliance actions
Individual Privacy Act, 2075 (2018) — Nepal
What this label means
- Verified
- — a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
- Pending review
- — linked to the official source and in the queue for a reviewer to confirm.
- Source-linked
- — linked to the official source, not yet confirmed by a reviewer.
On this page 9 sections
In brief
The Nepal Privacy Act 2075 is a binding act of Nepal, issued by the Federal Parliament of Nepal. It has been in force since 18 September 2018. Public bodies and private entities in Nepal that collect or process personal information, including through electronic means. 1 obligation is recorded against it, each with its source reference.
- Jurisdiction
- Nepal
- Instrument type
- Act / statute
- Status
- In force
- Legal force
- Binding
- Issuing body
- Federal Parliament of Nepal
- Adopted
- 18 September 2018
- In force
- 18 September 2018
- Obligations recorded
- 1
- Source reference
- Document-level URL and section references to be added by reviewer
- Official source
- Individual Privacy Act, 2075 (2018)
- Verification
- Verified against the official source 26 Sep 2026
What is the Nepal Privacy Act 2075?
The Individual Privacy Act 2075 gives effect to the constitutional right to privacy in Nepal. It regulates the collection, storage, processing, use and disclosure of personal information by public bodies and private entities, requires consent for collection and use of personal data subject to exceptions, restricts sensitive data, and provides remedies and penalties. It is the main binding law affecting AI systems that process personal data in Nepal. The Individual Privacy Regulation 2077 (2020) provides implementing rules.
Who does it apply to?
Public bodies and private entities in Nepal that collect or process personal information, including through electronic means. It does not address AI specifically.
Any organisation collecting or processing personal information of individuals in Nepal.
When do the requirements apply?
Enacted 2018 (2075 BS); Individual Privacy Regulation 2077 adopted in 2020.
Dates converted from Bikram Sambat; reviewer to confirm.
What must organisations do?
Obtain consent before collecting personal information, use it only for the stated purpose, keep it secure, and respect restrictions on sensitive data and on disclosure.
Each duty is one line: open it for the summary, practical action and evidence, or go to its own page.
Legal requirement Collect and use personal information only with consent and for the stated purpose Provider / developer, Deployer / user organisation +1
Personal information may be collected only by authorised persons for a lawful purpose with the individual's consent, and must not be used or disclosed for other purposes without consent, subject to statutory exceptions. AI systems trained on or processing personal data of people in Nepal must respect these limits.
Practical action: Document consent and purpose for any Nepal personal data used in AI training or inference.
Evidence examples: Consent and purpose records
Framework mapping (original, editorial): ISO/IEC 42001:2023 Annex A controls on data for AI systems
Open the obligation page →Chapter on collection and protection of personal information (reviewer to cite sections) Pending review (a factual check against the official source, not a legal review)
What are the penalties?
The Act provides for fines and imprisonment for violations, with amounts set in the Act (reviewer to confirm).
Official sources
-
Individual Privacy Act, 2075 (2018)
Nepal Law Commission · 18 Sep 2018 · Tier 1 source
Cite this record
AIPolicyTracker (2026). “Nepal Privacy Act 2075” [AIPT-POL-0139, record version 1, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-POL-0139 (accessed 27 October 2026). Data licensed CC BY 4.0.
Permanent id AIPT-POL-0139: it never changes or gets reused, and its address keeps working if this page moves.
Cite the official text alongside it: Individual Privacy Act, 2075 (2018), Nepal Law Commission, https://lawcommission.gov.np/.
BibTeX
@misc{aipolicytracker2026_nepalprivacyact2075,
author = {{AIPolicyTracker}},
title = {{Nepal Privacy Act 2075}},
year = {2026},
howpublished = {\url{https://aipolicytracker.org/policies/nepal-individual-privacy-act}},
url = {https://aipolicytracker.org/policies/nepal-individual-privacy-act},
urldate = {2026-10-27},
note = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}
Using this in a product? Commercial use is allowed under CC BY 4.0, with attribution. Ask about an SLA-backed feed or a white-label licence.
Add a status badge to your site or README
It shows the status and review state as recorded here and updates when the record does.
Markdown
[](https://aipolicytracker.org/id/AIPT-POL-0139)HTML
<a href="https://aipolicytracker.org/id/AIPT-POL-0139"><img src="https://aipolicytracker.org/badges/nepal-individual-privacy-act.svg" alt="AIPolicyTracker: Individual Privacy Act, 2075 (2018) — Nepal, In force · verified 26 Sep 2026" height="20"></a>Change history
Record history
No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.
Record version 1: Initial structured record. Every earlier wording is in the GitHub repository.
Frequently asked questions
Is the Nepal Privacy Act 2075 in force?
Yes. The Nepal Privacy Act 2075 is in force since 18 September 2018.
Is the Nepal Privacy Act 2075 legally binding?
Yes. The Nepal Privacy Act 2075 is a binding act / statute; the obligations it creates are legal requirements for the actors it covers.
Who does the Nepal Privacy Act 2075 apply to?
Public bodies and private entities in Nepal that collect or process personal information, including through electronic means. It does not address AI specifically.
When does the Nepal Privacy Act 2075 apply?
Enacted 2018 (2075 BS); Individual Privacy Regulation 2077 adopted in 2020.
What must organisations do under the Nepal Privacy Act 2075?
Obtain consent before collecting personal information, use it only for the stated purpose, keep it secure, and respect restrictions on sensitive data and on disclosure.
What are the penalties under the Nepal Privacy Act 2075?
The Act provides for fines and imprisonment for violations, with amounts set in the Act (reviewer to confirm).
Where is the official text of the Nepal Privacy Act 2075?
The official text is published by Nepal Law Commission at https://lawcommission.gov.np/ (Individual Privacy Act, 2075 (2018)). This record links to it and is checked against it.
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.