Legal Framework Addressing Doxxing in Pakistan
1. Section 20: Offences Relating to the Online Privacy of Individuals
Section 20 of PECA criminalizes the unauthorized sharing of personal data, including information such as addresses, phone numbers, and other private details, with the intent to harm or intimidate the individual. This section is directly applicable to doxxing incidents.
2. Section 21: Cyberstalking
This section addresses the act of cyberstalking, which includes the use of electronic means to harass or intimidate someone. While it does not explicitly mention doxxing, the act of repeatedly targeting an individual online can encompass doxxing behaviors.
3. Section 24: Identity Theft
Section 24 criminalizes identity theft, which can include the unauthorized use or dissemination of personal information. Doxxing often involves elements of identity theft, especially when personal details are shared to impersonate or defraud the individual.
4. Section 31: Unlawful Online Content
This section empowers authorities to remove or block online content that is deemed unlawful, which can include content resulting from doxxing that violates an individual's privacy or incites harm.
Enforcement and Legal Recourse
The National Cyber Crime Investigation Agency (NCCIA), established in May 2024, is the primary body responsible for investigating cybercrimes under PECA. Individuals who are victims of doxxing can file complaints with the NCCIA or the Federal Investigation Agency (FIA) through their official portals.
🇪🇬 Egyptian Legal Frameworks Addressing Doxxing
1. Cybercrime Law No. 175 of 2018
This law criminalizes various online offenses, including the misuse of personal data, defamation, and the spread of false information. It empowers authorities to remove or block illegal content and imposes penalties on those responsible.
Netsweeper
2. Personal Data Protection Law (PDPL) No. 151 of 2020
The PDPL regulates the collection, processing, and transfer of personal data. It prohibits the processing of personal data without explicit consent and grants individuals rights such as access to their data, correction, and erasure. The law also requires organizations to appoint a Data Protection Officer and obtain licenses for processing sensitive data.
PwC
+1
3. Criminal Code Provisions
Egypt's Criminal Code includes provisions that address offenses related to the misuse of personal information, such as blackmail and defamation, which can encompass doxxing activities.
Lexology
🇺🇸 Federal Laws Addressing Doxxing
1. 18 U.S. Code § 119 – Protection of Individuals Performing Certain Official Duties
This federal statute criminalizes the intentional public release of restricted personal information (such as home addresses or phone numbers) of certain individuals, including federal law enforcement officers and their immediate families. The law applies when the intent is to threaten, intimidate, or incite violence against these individuals. Violations can result in fines and imprisonment for up to five years.
Legal Information Institute
2. Interstate Doxxing Prevention Act (H.R. 6478)
Introduced in the 114th Congress (2015–2016), this bill proposed making it a federal crime to use interstate communication methods (like mail or online platforms) to knowingly publish personally identifiable information with the intent to threaten, intimidate, harass, or stalk, placing the individual in reasonable fear of death or serious bodily injury. While the bill did not pass, it reflects legislative efforts to address doxxing at the federal level.
Congress.gov
3. Protecting Law Enforcement from Doxxing Act (H.R. 5118 & S. 1952)
Introduced in 2025, these bills aim to amend federal law to criminalize the public release of the names of federal law enforcement officers with the intent to obstruct criminal investigations or immigration enforcement operations. Violations could lead to fines and/or imprisonment for up to five years.
1. General Principle
Hosting a site or server that facilitates illegal activity (harassment, doxxing, scams, child exploitation, threats, etc.) can make the host or operator legally liable, even if they do not personally commit the abuse. This falls under laws related to:
Conspiracy or aiding/abetting crimes
Negligence in preventing criminal activity
Content moderation and intermediary liability
list goes on, please take things semi serious when it comes to privacy =)