Overview of the Proposed PTA IoT Licensing Regime

The telecommunications sector in Pakistan faces a major shift as regulatory authorities work to formalize the growing market for connected devices and smart infrastructure. The Pakistan Telecommunication Authority has released a comprehensive proposal establishing new rules for Internet of Things services. These draft guidelines aim to streamline operations across different sectors while maintaining strict oversight of network traffic and data routing practices.

Under the draft rules titled IoT and Low Power Wide Area Networks Licensing Regulations 2026, the regulatory body divides the market into distinct tiers. These categories include commercial operators, private networks, research sandboxes, and software platforms. By structuring the industry this way, authorities hope to accommodate various business models while ensuring clear legal boundaries for all participants.

The framework arrives as demand for connected technology continues to expand across multiple industries, ranging from agriculture to municipal services. Previous frameworks handled these services through a district-level structure that carried higher costs and less flexibility. The new approach replaces that older system with structured tiers designed to encourage participation while enforcing compliance with national standards.

Commercial License Structure and Cost Reductions

At the center of the new framework is the five-year commercial license. Any business entity that intends to provide Internet of Things services to third parties using designated Low Power Wide Area Networks frequency bands must secure this credential from the telecommunications authority. The process requires a non-refundable processing fee of Rs 5,000 alongside an initial license fee of Rs 100,000.

This pricing represents a substantial decrease compared to the earlier district-level framework, which charged Rs 300,000. Industry observers note that the reduced financial barrier should make it easier for smaller enterprises and new market entrants to launch operations without prohibitive upfront expenses. The five-year validity period also provides long-term stability for business planning and investment.

Commercial licensees carry specific operational duties, such as providing district-level breakdowns in quarterly reports. These reports must detail active connections and gateway counts to keep regulators informed of network growth and usage patterns across different regions of the country.

Private Networks, Research Sandboxes, and Software Platforms

The regulatory structure extends far beyond commercial service providers to include internal networks and testing environments. Private setups confined to a single premise, such as factory floors, agricultural farms, corporate campuses, or industrial plants, require official registration. These internal networks are strictly limited to internal use and cannot commercialize services to outside clients. Registration for a private network costs Rs 10,000 with an additional Rs 5,000 processing fee, lasting for five years.

For innovators and enterprises testing emerging concepts, the agency established a dedicated sandbox category. This one-year experimental tier costs Rs 2,000 with a Rs 1,000 processing fee. Meanwhile, software providers building applications and analytics dashboards on top of device-generated data must obtain a platform registration. This five-year credential costs Rs 10,000 and captures firms that focus purely on software without managing physical hardware.

Exemptions also exist within the rules to prevent redundant paperwork for established market players. Major cellular companies like Jazz, Zong, and the merged Ufone-Telenor can deploy services using their current spectrum licenses. Devices using shared Short Range Device and Ultra-Wideband spectrum bands remain exempt, and hardware importers avoid separate licensing provided they meet standard type-approval requirements.

Strict Operational Requirements and Data Routing Mandates

Compliance under the new regulations involves stringent conditions, particularly regarding data flow and network architecture. All operators must route their backend traffic, including satellite backhaul transmissions, through an authorized Local Access Provider. Using an unlicensed operator for traffic routing results in the immediate and automatic cancellation of the corresponding license or registration.

This mandate ensures that all transmissions pass through regulated channels, granting the regulatory agency full visibility into national network traffic. In addition, licensed entities face strict timelines to begin operations. Operators receive a one-year window from their effective date to launch services and secure a commencement certificate. Missing this deadline triggers automatic revocation, though a single six-month extension may be granted upon review.

Operational oversight also includes mandatory quarterly reporting obligations. Licensees must submit detailed data regarding their active device connections and gateway installations on a regular basis to maintain good standing with the oversight body.

Frequency Allocations and Approved Application Sectors

The designated frequency bands for Low Power Wide Area Networks applications under the framework are set at 433.05 to 434.79 MHz and 920 to 925 MHz. Maximum transmission power is capped strictly at one watt. Operations within these frequencies run on a secondary, non-interference, and non-protection basis, meaning the telecommunications authority retains the legal right to restrict or suspend services at any time for reasons related to public safety or national security. The Frequency Allocation Board also holds the authority to review and grant exclusive frequency assignments on an individual case basis.

The framework formally identifies ten major application areas for deployment. These sectors encompass smart cities, energy utilities, agriculture, environmental monitoring, industrial automation, logistics, healthcare, education, and public safety. For historical context, the regulator previously issued initial credentials to 23 companies under an older framework in April 2026. Those existing authorizations will transition smoothly into the new regime for their remaining validity duration, provided the operators fulfill all updated compliance criteria within a 90-day window.