{"slug":"nepal-privacy-act-consent-and-purpose","id":"AIPT-OBL-0052","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0052","title":"Collect and use personal information only with consent and for the stated purpose","short_title":null,"category":"privacy_data_protection","summary":"Personal information may be collected only by authorised persons for a lawful purpose with the individual's consent, and must not be used or disclosed for other purposes without consent, subject to statutory exceptions. AI systems trained on or processing personal data of people in Nepal must respect these limits.\n","practical_action":"Document consent and purpose for any Nepal personal data used in AI training or inference.","is_binding":true,"applies_from":null,"section":null,"source_reference":"Chapter on collection and protection of personal information (reviewer to cite sections)","official_source_url":"https://lawcommission.gov.np/","review_status":"pending_review","confidence_level":"medium","last_verified_at":null,"reviewed_by":null,"actors":["provider","deployer","public_authority"],"sectors":["cross_sector"],"use_cases":["biometrics","finance_and_credit"],"applicability":[{"description":"All public bodies and private entities processing personal information in Nepal.","actors":["provider","deployer","public_authority"],"conditions":null}],"evidence_examples":[{"title":"Consent and purpose records","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A controls on data for AI systems","note":"Original editorial mapping.","confidence_level":"low","is_original":true}],"controls":[{"slug":"privacy-and-data-protection-for-ai","title":"Privacy and data-protection controls for AI","kind":"process","relationship":"satisfies","note":"Consent and purpose documentation for Nepal personal data.","confidence_level":"high","url":"https://aipolicytracker.org/controls/privacy-and-data-protection-for-ai"},{"slug":"training-data-provenance-and-copyright-register","title":"Training-data provenance and copyright register","kind":"process","relationship":"supports","note":"Source register records the basis for each training source.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/training-data-provenance-and-copyright-register"}],"url":"https://aipolicytracker.org/obligations/nepal-privacy-act-consent-and-purpose","policy":{"slug":"nepal-individual-privacy-act","title":"Individual Privacy Act, 2075 (2018) — Nepal","status":"in_force","jurisdiction":"nepal","url":"https://aipolicytracker.org/policies/nepal-individual-privacy-act"}}