Per Pakistan Personal Data Protection Bill 2023 Clauses 2-3: define scope + applicability + key definitions. Requirements include (a) determine applicability based on processing of personal data in Pakistan or related to data subjects in Pakistan + extraterritorial reach per the Bill + (b) apply definitions of personal data + sensitive personal data + critical personal data + data controller + data processor + data subject per the Bill + (c) document applicability assessment + maintain through change + (d) classify data accordingly + (e) align internal definitions with the Bill + (f) maintain records demonstrating scope determination + applicability.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.