What Is Afghanistan Privacy Protections: Telecommunications Services Regulation Law 2010 + DAB Credit Reporting Regulation 2010 (No Enacted Omnibus Law Located)?
No enacted national omnibus personal-data-protection law was located in the reviewed official pre- and post-2021 primary-source corpus. The evidence supports the bounded conclusion "no enacted omnibus law located," rather than confirming that a pre-2021 privacy law remains in force or was formally suspended. Post-2021 legal status is politically unsettled: an official Ministry of Justice report describes review of prior laws and a proposed decree, but no final transition decree was located. The current framework is sectoral. The Telecommunications Services Regulation Law 2010 provides confidentiality, limited disclosure, purpose notice, accuracy, access, and directory-correction protections. The DAB Credit Reporting Regulation 2010 provides more detailed rights for credit-reporting consumers, while Penal Code cybercrime provisions address certain unauthorized disclosures or publications of personal material. The 1964 Constitution and 2004 Constitution remain subject to a currentness conflict in the official materials reviewed, so privacy provisions from those texts should not be treated as conclusively operative. No independent general privacy authority, general complaint procedure, comprehensive cross-border regime, or general data-broker deletion route was located.
At a glance
- Full name
- Afghanistan Privacy Protections: Telecommunications Services Regulation Law 2010 + DAB Credit Reporting Regulation 2010 (No Enacted Omnibus Law Located)
- Short code
- Sectoral Privacy Protections
- Jurisdiction
- Afghanistan
- Enacted
- 2010
- Last major update
- No enacted national omnibus personal-data-protection law was located; post-2021 legal-force treatment of prior instruments remains unsettled, and the DAB Credit Reporting Regulation 2010 remains listed on the current regulations page
- Regulator
- No general personal-data regulator located; sectoral materials are administered through the Ministry of Communications and Information Technology and Da Afghanistan Bank
- Private right of action
- Limited
Scope, who Sectoral Privacy Protections covers
Protected data
Data subject rights
No complete general data-subject-rights framework was located
Telecom confidentiality and limited disclosure of communications and user information
Free correction of electronic directory entries within 30 days
Credit-reporting right to prior informed written consent before sharing or inquiry, subject to stated exceptions
Credit-reporting right to access one’s credit report and receive access within three working days
Credit-reporting right to challenge, correct, and delete illegal, inaccurate, or outdated data
No general rights to portability, automated-decision safeguards, universal erasure, objection, restriction, or complaint to an independent data-protection authority were located
Notable features
Afghanistan is a no-enacted-omnibus-law case with politically unsettled post-2021 legal status. The strongest current protections are sectoral: telecom users receive confidentiality and directory-correction protections, while credit-reporting consumers receive access, challenge, correction, and deletion routes. The Credit Reporting Regulation contains an apparent inconsistency between a 20-working-day dispute milestone and the separate 5+10+5 working-day sequence; the controlling Gazette text should resolve it before publication.
Enforcement & penalties
Penalties: No general administrative penalty schedule for personal-data violations was located. Officially located cybercrime penalties include medium imprisonment up to two years or AFN 60,000-120,000 for unauthorized publication of another person’s private audio, image, or video causing harm; medium imprisonment exceeding three years or AFN 60,000-180,000 for knowingly altering or distorting such material and publishing it with reputational harm; and, for legal persons, up to twice the maximum applicable fine and temporary suspension under the statutory conditions. No specific monetary penalty for telecom confidentiality or CIB correction rights was located.
Private right of action: No general civil right of action for data-protection violations was located. Credit-reporting consumers may escalate unresolved disputes to Da Afghanistan Bank, with court appeal available. Cybercrime provisions require a victim complaint for specified offenses, but no general compensation route or complaint-filing deadline was located.
Relevance to data brokers
A narrow official route exists for credit-information records held by credit-information bureaus, including access, challenges, correction, deletion of illegal, inaccurate, or outdated data, and escalation to Da Afghanistan Bank. A general data-broker or non-credit public-record complaint or deletion route was not located. This does not establish that such a route definitively does not exist.
Generate requests in under 60 seconds
Explore 1,034 US/global data brokers
FAQ
Does Afghanistan have a comprehensive data-protection law?+
No enacted national omnibus personal-data-protection law was located in the reviewed official sources in the 11 October 2026 review. Current protections are sectoral, including telecom rules, credit-reporting rules, access-to-information privacy exemptions, and targeted cybercrime provisions.
Can I correct or delete my credit information in Afghanistan?+
The DAB Credit Reporting Regulation provides credit-reporting consumers with rights to access their reports, challenge inaccuracies, and seek correction or deletion of illegal, inaccurate, or outdated data. Unresolved disputes may be escalated to Da Afghanistan Bank.
Can I ask a general data broker to delete my information in Afghanistan?+
A general data-broker or non-credit public-record complaint or deletion route was not located. The identified official route is narrow and concerns credit-information records; this does not establish that no other route exists.
Official sources & citations
Other international privacy regimes
Sectoral Privacy Protections sits in a global ecosystem of data-protection laws. Start with these comparative frameworks, or visit the privacy research hub for the complete jurisdiction index: