Data Governance and Data Protection Bill 2026

Draft Governance and Data Protection Bill 2026

PUBLIC CONSULTATION PORTAL

Draft Data Governance and Data Protection Bill 2026

Have your say on Papua New Guinea’s proposed data governance and data protection framework.

Welcome

The Government of Papua New Guinea invites public authorities, regulated industries, professional bodies, civil society organisations, academic institutions, development partners and members of the public to comment on the proposed Data Governance and Data Protection Bill 2026.

This portal is the official channel for submitting written comments on the Bill. It allows you to upload a submission, track what you have sent, and access the supporting consultation documents in one place.

About the Bill

The proposed Data Governance and Data Protection Bill 2026 will establish a national framework for the responsible collection, use, protection, storage and sharing of personal and government data in Papua New Guinea.

The Bill is intended to protect individual privacy, improve accountability among organizations handling data and support secure digital government and economic development. It addresses individual data rights, organizational obligations, data security and breach notification, government data sharing, cross-border transfers, digital identity, sovereign hosting and the responsible use of automated and artificial intelligence systems.

Stakeholders are invited to comment on whether the proposed rights, responsibilities, safeguards and enforcement arrangements are clear, balanced and capable of practical implementation. Feedback is also sought on the proposed governance model, including the initial administration of the legislation by NICTA and the possible future establishment of a separate national digital economy authority.

Who Should Participate?

We welcome submissions from anyone with an interest in the Bill, including:

Government agencies and State bodies
Regulated industries and private sector organizations, including data controllers, processors and service providers.
Professional and industry bodies
Civil society organizations and advocacy groups
Academic and research institutions
Development partners
Members of the public

What we would like your views on

Stakeholders are encouraged to comment on the practical effect of the proposed provisions, including their suitability for Papua New Guinea’s legal, institutional, economic, and technical circumstances. Submissions should be read alongside the draft Bill and the Revised Detailed Drafting Instructions, both available for download below.

Key matters for comment include:

Scope and application: whether the Bill appropriately covers government agencies, State bodies, private organizations, contractors, service providers and relevant foreign entities, and whether the territorial reach, exclusions and exemptions are appropriate.
Individual rights and organizational duties: whether the proposed rights (information, access, correction, erasure, restriction, objection, portability, human review, compensation) and the duties on controllers and processors are clear, workable, and appropriately balanced against legitimate public interests.
Government data governance and interoperability: whether the proposed rules on classification, data quality, sharing, interoperability, enterprise architecture, the National Data Catalog and the national data exchange platform provide a workable basis for coordinated digital government.
Sovereign hosting and cross-border transfers: whether the proposed controls adequately protect personal and nationally significant data while allowing appropriate use of secure regional or international services.
Artificial intelligence and automated decision-making: whether the proposed interim, risk-based framework for prohibited practices, high-risk systems, impact assessment, bias testing, audit logging, transparency and human oversight is clear and proportionate.
Compliance, enforcement and implementation: whether the proposed powers to receive complaints, investigate, audit, issue directions, impose sanctions and provide remedies are suitable, and whether staged commencement and transitional arrangements are appropriate.

A central governance question is also open for comment: whether the National Information and Communications Technology Authority (NICTA) should administer the Bill’s functions on an interim basis, pending the establishment of a standalone National Digital Economy Authority, and what safeguards, accountability arrangements and readiness conditions should apply during that transition.

How to prepare your submission

To help us consider your comments effectively, please:

Identify the specific provision, clause, or subject you are addressing.
State your position clearly (support, oppose, or propose an amendment)
Explain the likely practical effect of the proposal you are commenting on.
Where possible, suggest alternative wording or implementation options.
Provide supporting evidence or examples from your sector, where relevant
Clearly mark any information you consider confidential and explain why

How to Submit your comments

Register or sign in to the portal using your name and email address.
Select “New Submission” and choose the stakeholder category that best describes you.
Upload your written submission (PDF or Word format) or complete the online comment form.
Review your submission and confirm any confidentiality request.
You will receive an email confirmation with a reference number for your records.

You may upload a single consolidated submission or submit comments on individual matters separately. You can save a draft and return to complete it before the closing date.

Key Dates

Consultation opens	Consultation closes
[06th August 2026]	[21st August 2026]

Submissions received after the closing date may not be considered. Late submissions can be sent to the contact address below with an explanation for the delay.

Confidentiality and use of submissions

Submissions may be published in whole or in part, including on this portal, to support transparency in the consultation process. If you wish any part of your submission to be treated as confidential, mark it clearly and provide reasons. Requests for confidentiality will be considered but cannot be guaranteed, including where disclosure is required by law.

Personal information you provide will be handled in accordance with applicable privacy requirements and used only for the purposes of this consultation.

Need help or have questions?

If you experience technical difficulties with the portal, or have questions about the consultation process, please contact:

Email: pokana.nouairi@ict.gov.pg | thompson.simon@ict.gov.pg

Postal address (for stakeholders unable to submit online): Department of ICT PO Box 784, Vision City, NCD

This notice has been prepared with reference to the National Data Governance and Data Protection Policy 2024 and the Revised Detailed Drafting Instructions for the Data Governance and Data Protection Bill 2026.

Data Governance and Data Protection Bill Notice

Data Governance and Data Protection_Act_2026

Here's how you know