NICTA is developing three new Bills to expand regulation of Papua New Guinea’s digital space, covering data protection, digital identity and emerging technologies.

The proposed reforms were discussed during a two-day stakeholder consultation involving ICT professionals from government departments, state-owned enterprises and the private sector in Port Moresby on Aug. 27 and 28.

NICTA Chief Executive Officer Polume Lume said the reforms are needed because the existing regulatory framework largely focuses on traditional telecommunications.

“The current regulatory setup basically focuses only on connectivity and accessibility, as well as affordability,” Lume said.

He said emerging areas such as cybersecurity and digital identity are not adequately covered under the current framework.

“The emerging related issues that come about, such as cybersecurity, digital ID and stuff like that, they are not covered well within the current regulatory setup,” he said.

Lume said the proposed Bills are intended to broaden the country’s digital regulatory framework.

“The idea is now to continue to expand that framework so that we now can accommodate those emerging policy related issues,” he said.

DATA GOVERNANCE AND PROTECTION

One of the proposed laws is the Data Governance and Data Protection Bill 2026.

The Bill would establish a national framework for how data is collected, used, protected, shared and managed across the public and private sectors.

It proposes requirements for organizations that collect or process personal information, including safeguards for sensitive information and children’s data.

The proposed framework would also give individuals greater control over their personal information.

People would have rights to know how their data is being processed, access their information, request corrections and, in certain circumstances, seek restrictions on its use.

The Bill also proposes rights relating to erasure, objection and data portability, as well as the ability to seek compensation where a person suffers loss or damage because of a breach of the proposed law.

Organizations would have responsibilities relating to data security, retention, breach notification and lawful processing.

The proposed system would also provide for complaints, investigations, audits, enforcement and redress.

The Bill also addresses how government data is managed, including data classification, quality, interoperability and information sharing between government systems.

It proposes a National Data Catalogue and national data exchange platform, along with controls for restricted, confidential and strategically significant information.

The proposed framework also addresses cross-border data transfers and sovereign hosting, particularly where sensitive information is involved.

DIGITAL IDENTITY

Digital identity is another part of the proposed reforms.

Lume compared a digital ID with existing identification documents such as passports.

“Even your passport is also just a very similar approach on that. So if we can be able to get a digital ID, then it addresses a lot,” he said.

He said digital identity could also help make digital interactions safer by allowing people to identify who they are dealing with.

“It also creates a safe environment as well, so that you know that any unknown number that comes in, there’s a name to that. There’s an ID to that,” Lume said.

The proposed framework is intended to support trusted digital services and stronger authentication.

ARTIFICIAL INTELLIGENCE

Artificial intelligence is also included in the proposed digital reforms.

The consultation document proposes an interim, risk-based approach to AI governance, including safeguards for prohibited practices and high-risk AI systems.

High-risk systems could be subject to impact assessments, bias testing, audit records and transparency requirements.

Human oversight is also proposed where automated decisions could materially affect people’s rights or access to significant public services.

The three Bills remain subject to stakeholder consultation and the legislative process before they can become law.