Data is no longer a simple collection of information, but a strategic asset for individuals, businesses, and governments. The digital ecosystem now underpins modern societies, emphasizing that Nepal too needs to strengthen its digital infrastructure to protect the identity of its citizens and compete in global markets.
In 2025, approximately 16.6 million individuals in Nepal accessed the internet, resulting in an online penetration rate of 56.0 percent. The National Identity Card and applications such as the Nagarik App have been promoted as foundational digital public infrastructure to integrate e-governance systems. Nepal’s digital infrastructure is also expanding with government initiatives to roll out 5G services and increase investments in broadband connectivity, financial technology, and platform-based services. Despite these ambitious goals, the existing regulatory framework for the digital sector remains fragmented and fails to meet the fast-paced global digital transformation.
Reportedly, half of Nepal’s population has internet access, but digital literacy remains low, making citizens vulnerable to various data breaches. Data breach directly affects the concept of personal identity and liberty, a right guaranteed by the Constitution. Data privacy right is a collective safeguard to protect personal autonomy. In the absence of robust data protection law, intensive coerced data processing and constant profiling have the capacity to de-individualize a person without their conscious intervention, predicting their choices and, in some cases, even deciding for an individual, compromising the right of identity and liberty.
Government efforts to integrate digitalization into existing systems have been limited. Attempts to require online platforms to register were unsuccessful as the platforms cited bureaucratic red tape, leading to a complete ban on all social media platforms. Similarly, all forms of digital assets are completely banned in Nepal. This all-ban approach has led to regulatory stagnation without a clear way forward. Traditional governance structures and legal frameworks are inadequate for addressing challenges such as data ownership, cross-border data flows, platform accountability, artificial intelligence, and cyber threats. Approaching digital issues solely as extensions of criminal or civil law overlooks their broader, important economic implications.
Not only does the absence of law result in frequent data breaches that harm citizens’ right to privacy, but it also creates obstacles for e-commerce and the overall digital economy ecosystem. The lack of robust digital laws has constrained investment opportunities in Nepal, due to missed opportunities as the digital sector reaches new heights globally. Many multinational corporations operate under stringent data protection frameworks such as the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) or India’s Digital Personal Data Protection Act (DPDP Act). Having inadequate laws means having an unfriendly business environment in the digitally evolving world.
Experts suggest, without data protection legislation in developing countries, investors may perceive heightened legal compliance risks. Additionally, emerging sectors such as FinTech, EdTech, HealthTech, and E-commerce, which rely heavily on user data, will need to meet privacy compliance requirements in Nepal, which may influence their market-entry strategies and timelines.
A further obstacle to developing effective digital legislation in Nepal is the lack of reliable research on the digital ecosystem. Publicly available information regarding data generation, storage practices, digital asset distribution, and sector-specific digital dependency is limited. Without a proper understanding of Nepal’s digital footprint, policymaking remains speculative rather than grounded in evidence.
Similarly, in the absence of comprehensive legal frameworks addressing cross-border payments, digital assets, artificial intelligence integration, and other aspects of digitalization, facilitating business investment remains challenging. As the digital divide between technologically advanced and less developed countries continues to widen, the creation of investment opportunities has become increasingly urgent for Nepal.
Digital governance increasingly overlaps with digital diplomacy and investment attraction. Nepal needs a strategic approach to attract investment that involves effective collaboration to build digital infrastructure and to prioritize digitized partnerships with its neighbors and other key stakeholders.
On a macro scale, adherence to international regulatory standards pertaining to the digital ecosystem now influences Nepal’s interactions with foreign governments, multinational corporations, and international organizations. Laws and frameworks must facilitate cross-border investments, especially regionally. Nepal would benefit from adopting a regional approach to digital diplomacy. As China and India are leading internationally in the digital sector, Nepal should leverage this context to identify and implement the most relevant frameworks. Digital reform should unlock the possibilities of securing investments in their truest form by removing unnecessary bureaucratic processes and appropriately incentivizing digital sector stakeholders.
On an individual scale, to guarantee its citizens of natural rights to identity, privacy, and liberty, Nepal should shift toward a user-centric identity management policy-making process. The policy should be such that it takes into account the reality of low digital literacy in Nepal and effectively restores the balance of power of individual data ownership.
To protect the identity of its citizens and maintain competitiveness in an increasingly digital global environment, Nepal must transition from outdated legal frameworks to a progressive digital governance model.
