What Is The Privacy Act, 2075 (2018)?
Nepal's Privacy Act, 2075 (Act No. 14 of 2075), authenticated 18 September 2018 (2075.6.2) and effective immediately, defines personal information broadly (address, contact details, identity-document details, biometric information, criminal background, and certain professional opinions) and requires consent for collecting personal or family data, limiting use to the collection purpose. The Act restricts disclosure or publication without consent of listed sensitive categories (health, property/income, employment, family matters, biometrics, signatures, political/election information, and business/transaction details), subject to statutory exceptions. Section 28 lets a person apply to the concerned public body at any time for correction of information it holds, with implementing rules requiring investigation and notice of the outcome. The Act does not set out a standalone general access right or a deletion/objection/direct-marketing opt-out right in the reviewed text. This is a source-backed evidence profile. The official text is Nepali; the English rendering used for research is a translation from the Asian Development Bank and should be checked against the Nepali original before publication. No Nepal-specific data-broker or public-record removal route was located.
At a glance
- Full name
- The Privacy Act, 2075 (2018)
- Short code
- Nepal Privacy Act 2075
- Jurisdiction
- Nepal
- Enacted
- 2018
- Last major update
- Privacy Rules 2077 consolidated through the end of 2081 Chait per the Ministry of Law; no later amendment to the Act itself located in the 5 September 2026 review
- Regulator
- No dedicated data-protection authority located; enforcement runs through the concerned public body and the District Court
- Private right of action
- Yes
- Statutory citation
- The Privacy Act, 2075 (2018), Act No. 14 of 2075
Scope, who Nepal Privacy Act 2075 covers
Protected data
Data subject rights
Consent required for collecting personal or family data, with use limited to the stated collection purpose (section 12)
Restriction on disclosure/publication without consent of listed sensitive categories, subject to statutory exceptions (sections 25–27)
Correction application to the concerned public body for information it holds, at any time, with reasons and supporting evidence (section 28)
Complaint to the concerned District Court within three months for most offences under the Act (section 30); a separate compensation complaint for damage, loss, or injury (section 31)
Notable features
The Act has no dedicated data-protection commissioner; enforcement runs through the concerned public body (for correction) and the District Court (for other violations and compensation), a structurally different model from commissioner-led regimes.
Enforcement & penalties
Penalties: The reviewed English translation and Ministry of Law materials for this research pass did not surface a consolidated fine/imprisonment schedule; check the Nepali statutory text for current penalty provisions before publication.
Private right of action: Section 31 lets a person suffering damage, loss, or injury from a violation complain to the concerned District Court for compensation; section 30 provides a separate District Court complaint route (within three months) for other offences under the Act.
Relevance to data brokers
No jurisdiction-specific data-broker or public-record removal route was located. The clearest broker-relevant route located is the section 28 correction application, which applies to information held by a public body, not a general private-sector deletion right.
Generate requests in under 60 seconds
Generate removal requests for 1,034 US/global profiles, $9
FAQ
Does Nepal have a dedicated data-protection regulator?+
No dedicated data-protection authority was located in the official sources reviewed. Correction requests for public-body records go to the concerned public body; other Privacy Act complaints go to the concerned District Court.
Can I get my personal information deleted under Nepal’s Privacy Act?+
The reviewed Act does not set out a standalone deletion/erasure right. The clearest located route is a correction application under section 28 for information held by a public body.
Official sources & citations
Other international privacy regimes
Nepal Privacy Act 2075 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows: