The Pakistan Telecommunication Authority (PTA) has released the draft Internet of Things and Low Power Wide Area Networks (IoT-LPWAN) Licensing Regulations 2026. This framework sets legal rules for deploying connected devices in agriculture, healthcare, smart logistics, and urban infrastructure through mandatory licensing and registration tiers.

For companies building wide-area commercial IoT services, the proposed rules establish a five-year license with an initial fee of PKR 100,000. Up to this point, operators in Pakistan deployed low-power wide-area networks without a dedicated regulatory framework tailored specifically to IoT connectivity.

Licensing and Registration Tiers

The proposed framework divides IoT operations into four distinct categories based on network scale, target users, and commercial intent.

  • Commercial IoT License: Five-year validity period, PKR 100,000 initial license fee. Operators in this category offer connectivity services directly to third-party clients across public or shared networks.
  • Private IoT Network Registration: Five-year validity period, PKR 10,000 initial registration fee, and a PKR 5,000 application processing fee. This category covers non-commercial networks managed strictly for internal enterprise operations, industrial automation, or localized property monitoring.
  • IoT Platform and Application Provider Registration: Five-year validity period, PKR 10,000 initial registration fee, along with a PKR 5,000 processing fee. This applies to entities providing software platforms, data analytics, and cloud management layers for connected devices without managing underlying physical network access.
  • Research and Development (Regulatory Sandbox): One-year validity period, PKR 2,000 initial fee, and a PKR 1,000 processing fee. Designed for academic institutions, hardware developers, and testing centers conducting short-term experimental trials.

Operational Obligations and Deadlines

Licensed operators face clear timelines to bring their networks into service once approved.

The draft regulations mandate that commercial license holders must launch operations within 12 months of receiving approval. Licensees must apply for and obtain an official commencement certificate from the authority before offering commercial services. If an operator encounters deployment delays, the authority may grant a single extension of up to six months upon written request. Failure to meet the operational deadline within the permitted timeframe can result in immediate license cancellation.

Technical compliance requirements extend down to hardware tracking and backhaul routing. Licensees must register every active IoT gateway through the regulatory authority’s online portal. Operators must submit detailed quarterly reports covering their active node counts, total operational gateways, and physical deployment locations. Furthermore, all backend network traffic, including satellite transmission links, must route through a licensed Local Access Provider within Pakistan.

Transition Rules for Current Operators

Companies already operating connected device networks under legacy telecom authorization receive a transition window under the draft rules.

Existing operators can maintain services under their current license terms until those licenses reach their stated expiration date. However, these firms must bring their operations into compliance with mandatory tracking rules. Current operators have 90 days from the date the new regulations take effect to register all operational gateways in the portal and secure the required commencement certificates from the PTA.

Security Controls and Data Requirements

The framework includes explicit provisions for national security monitoring and network compliance.

The authority retains the legal power to direct operators to suspend, restrict, or modify IoT network operations on short notice during security reviews or emergency declarations. Applicants must submit comprehensive technical deployment blueprints during the licensing process. These submissions require geographical coordinate data for gateway locations, spectrum utilization details, and full network architecture diagrams showing connection points to local access providers. For more on how the regulator manages sector compliance, see PTA Recovers Only 12.9% of PKR 4.27 Billion Telecom Penalties Issued Over Five Years.

Industry Considerations and Next Steps

As the draft document moves through the public consultation phase, several operational details remain open for industry input.

Key areas under review include how the PKR 100,000 fee impacts early-stage hardware startups operating on thin margins, the exact data field requirements for quarterly gateway filings, and spectrum utilization rules for devices operating on unlicensed frequency bands such as 868 MHz or 915 MHz.

Stakeholders can submit feedback directly to the authority before the draft rules are finalized into law. This regulatory shift reflects a wider administrative push for structured oversight, as discussed in PTA, Ufone and Telenor Host Zero Trust Cybersecurity Workshop for Telecoms. Network managers and product teams should follow updates on the official PTA web portal for final implementation deadlines, similar to recent procedural changes reported in PTA Proposes 10-Year Radio Licences and 15-Day Digital Processing.

Source: PhoneWorld