// THESIS GUIDANCE PORTAL · Law
Data Privacy Law Readiness in Nepal
1. Introduction & Problem Statement
Overview: Comparative legal study assessing Nepal's data-protection legislation against international standards.
Background Context (Nepal): As Nepal expands digital governance, e-commerce, and biometric national identity cards (Rastriya Parichayapatra), the absence of a comprehensive GDPR-style Data Protection Act leaves citizen personal data vulnerable.
2. Research Objectives
- ›Critically evaluate privacy protection provisions under Article 28 of the 2015 Constitution and the Individual Privacy Act 2075
- ›Comparative legal benchmark assessing Nepal's data protection statutory framework against the EU General Data Protection Regulation (GDPR)
- ›Examine legal data compliance readiness among commercial banks, telecoms (Ntc, Ncell), and digital payment gateways in Nepal
- ›Analyze legal risks surrounding cross-border data transfer, biometric national ID databases, and mandatory SIM registration
- ›Draft a comprehensive model Personal Data Protection Bill for Nepal's Parliament
3. Proposed Methodology
- Doctrinal legal research methodology analyzing Individual Privacy Act 2075, Constitutional privacy jurisprudence, and GDPR clauses
- Legal compliance audit surveying corporate legal counsel at 15 major Nepali banks, telecoms, and tech firms
- In-depth qualitative interviews with Supreme Court privacy lawyers, Information Commissioners, and IT legal experts
- Comparative statutory matrix benchmarking data consent, right-to-be-forgotten, data breach notification, and Data Protection Authority (DPA) independence
- Legislative drafting of model data protection statutory provisions
$ Worked Example / Sample Scenario
Sample Scenario: A legal compliance audit across 15 tech firms in Kathmandu reveals that 80% lack explicit user consent mechanisms or data breach disclosure protocols due to missing enforcement regulations under the Individual Privacy Act 2075.
4. Thesis Chapter-by-Chapter Outline
Chapter 1: IntroductionTU/KU standard
Background, problem statement, research questions, objectives, scope, limitations, and significance of the study
Chapter 2: Literature ReviewTU/KU standard
Theoretical framework, conceptual models, previous empirical studies in Nepal and developing nations, constitutional privacy jurisprudence, EU GDPR standards, and Individual Privacy Act 2075 analysis, and gap analysis
Chapter 3: Research MethodologyTU/KU standard
Research design, population/sampling framework, data collection instruments, analytical tools, and ethical considerations
Chapter 4: Data Analysis & ResultsTU/KU standard
Empirical findings, statistical testing, model estimations, statutory compliance matrices, GDPR comparative gap tables, and draft statutory bill clauses, and detailed discussion
Chapter 5: Conclusion & RecommendationsTU/KU standard
Summary of key findings, theoretical contributions, policy recommendations, and future research directions
5. Recommended Tools & Technologies
To implement the practical, technical, or analytical portions of this thesis topic, the following software tools, libraries, or APIs are recommended:
6. Core References & Academic Sources
- [1]Government of Nepal — Individual Privacy Act 2075 (2018) & Rules
- [2]EU General Data Protection Regulation (GDPR) Statutory Text
- [3]Nepal Bar Council Journal / Supreme Court Bulletin — Privacy jurisprudence papers
7. Frequently Asked Questions (FAQs)
Q: What law currently governs data privacy in Nepal?
The Privacy Act 2075 (2018) enacted under Article 28 of the Constitution, though it lacks an independent Data Protection Authority enforcement body.
Q: What is the GDPR gold standard?
The EU General Data Protection Regulation (GDPR) mandates strict data minimization, explicit consent, right to erasure (right to be forgotten), mandatory breach notification within 72 hours, and severe financial penalties.
Q: What is the legal status of National Identity Card (Rastriya Parichayapatra) biometric data?
National ID biometric data collection is governed by the Department of National ID and Civil Registration Act, raising ongoing constitutional privacy debates regarding centralized database security.
Q: Does Nepal have a Data Protection Authority (DPA)?
No, Nepal currently lacks a dedicated independent Data Protection Authority to oversee and penalize corporate and government data breaches.
Related Thesis Topics & Student Tools
Cybersecurity Threat Detection for Nepali Banking Systems
Difficulty: Advanced
LawCyber Law Enforcement Gaps in Nepal's Electronic Transaction Act
Difficulty: Advanced
LawLegal Framework for Land Dispute Resolution in a Digitized Land Records System
Difficulty: Advanced
University GPA Calculator
Calculate TU, KU, and PU semester grade point averages.
open GPA tool →