Data protection: PDP bill, classified handling, residency

Three ways to see it

1. 1

   Data protection in a civil servant's life rests on three first principles. Classification: the sensitivity of the information itself. Custody: who has touched it and when. Channel: the path the information has travelled. AI tools complicate all three. They invite you to paste classified information into unfamiliar channels with no clear custody trail. The discipline is to refuse the invitation, structurally, before the moment of temptation arrives.

2. 2

   The Pakistan Personal Data Protection bill, in its current published draft, distinguishes between personal data, sensitive personal data, and critical personal data. Personal data is name and CNIC. Sensitive personal data adds health, religious belief, biometrics, and political opinion. Critical personal data is what the federal government may notify, including data of strategic importance. AI tools that process any of these categories at scale come under the bill's data-processor obligations: lawful basis, purpose limitation, retention limit, security safeguards, breach notification.

3. 3

   Classified handling is older and stricter. The Manual of Office Procedure, the Establishment Division's instructions, and the various services' security manuals together govern what may be reproduced, photographed, transmitted electronically, or shown on a screen visible to others. A document marked Secret may not be photographed on a personal phone. A document marked Top Secret may not be processed on any system not certified for that classification. AI services run by external providers are, by definition, not certified for any Pakistani classification. The rule is simple: if the document carries a classification stamp, no part of its content goes to any external AI service, ever, even paraphrased.

The why-tree

Try this with Claude

AI-edge prompt: 'I am a deputy secretary in a federal ministry. List ten common workplace documents (e.g., DAC minutes, audit observations, performance evaluation reports, condolence letters, public press releases, citizen complaints, internal organograms, ECC summaries, gazette notifications, RTI responses) and classify each as: layer-one public, layer-two internal-not-sensitive, layer-three sensitive. Justify in one line each. Then propose three desk habits to keep the layers separate in my daily workflow.'