Does an internet services business need a PTA licence?

An internet services business in Pakistan may require a licence from the Pakistan Telecommunication Authority (PTA), but the precise authorisation depends on the service it provides, network facilities it owns, customers it serves and the category of electronic communications activity involved. An internet service provider operating its own access network is not necessarily in the same legal position as a software company offering websites or cloud applications over networks operated by licensed telecommunications providers.

The Pakistan Telecommunication (Re-organization) Act, 1996, applicable licensing regulations, PTA authorisations and current policy directions provide the core framework. The business model should be classified before a company buys infrastructure, markets broadband subscriptions or promises connectivity under its own brand.

Determine what the customer is buying

The first distinction is between access to a telecommunications network and an application delivered over that network. A company that provides household fibre connections, radio broadband or last-mile access may be engaged in regulated telecommunications services. A company supplying accounting software through ordinary internet connectivity may be providing an application service without itself operating an access network.

The business plan must identify whether the company sells internet connectivity, installs network equipment, leases wholesale bandwidth, operates network infrastructure, resells another operator's product, offers hosting or provides only digital content. Describe where the service is delivered, how customers are connected, who assigns network resources and who issues invoices.

The classification should be based on substance rather than a trade name. Calling a connectivity business a technology platform does not change the nature of the service delivered to paying subscribers.

Identify the applicable licence category

PTA operates a telecommunications licensing framework covering specified service categories and geographic scopes. Historically these have included local loop, wireless local loop, long-distance and international, and internet or data-related authorisations, subject to regulatory changes and licence policy.

A prospective operator should check the categories currently open for application, geographic boundaries, conditions, fees, performance obligations and minimum technical requirements. An older licence category mentioned in a consultant's template may have been modified, discontinued or replaced by another route.

A licence or registration for one type of activity should not be assumed to authorise every network service. For example, providing wholesale infrastructure may raise different issues from selling retail broadband, and wireless spectrum use may require a separate lawful basis.

Business registration is not telecommunications authorisation

A company can be incorporated through SECP, registered for taxation and given a relevant business object in its memorandum while still lacking permission to conduct a regulated telecommunications service. Corporate formation establishes the legal person; the telecommunications licence governs authorised operations.

Inspect the company's articles, proposed ownership and management structure, and any statutory or licence eligibility conditions before applying. The applicant should also check whether foreign shareholding or a change in control requires notice or consent under the relevant telecommunications framework.

Launching subscriptions while an application is pending is not automatically lawful. The legal significance of filing, conditional approval, licence grant and commencement should be established directly from the applicable regulation and correspondence.

Leasing bandwidth from an existing operator

An entrepreneur may plan to buy bulk bandwidth from a licensed provider and resell access to users. The legality of this structure depends on what service the entrepreneur actually offers, the wholesale agreement, the licence terms of the upstream provider and the licensing requirements for the reseller.

Merely relying on the upstream provider's authorisation may be insufficient where the intermediary itself contracts with retail subscribers and operates a distribution network. Conversely, a contractor installing equipment or providing billing software for the licensed operator may have a different regulatory status.

The wholesale agreement should state technical demarcation, service levels, responsibility for compliance, network security, subscriber verification and lawful interception or record obligations where applicable. The contracting parties should not leave regulatory responsibility to an ambiguous statement that the upstream operator is licensed.

Network infrastructure and site permissions

A connectivity business may need fibre rights of way, permissions to install poles or ducts, building access agreements, tower leases or local authority permits in addition to PTA authorisation. These rights are distinct from permission to offer the service.

Verify land and building rights, municipal restrictions, utility corridors and the arrangements for maintaining equipment. A telecom licence does not by itself give unrestricted authority to place cables or radio equipment on private property.

Where radio spectrum is used, identify the relevant spectrum allocation, frequency authorisation and technical conditions. A commercially purchased wireless router or transmitter cannot necessarily be operated at any power or frequency simply because the equipment is available in the market.

Technical, quality and network obligations

Licences may impose requirements concerning network architecture, quality of service, coverage, interconnection, numbering or other technical matters depending on category. Determine which standards apply and budget for compliance from the beginning.

A new operator should prepare a realistic network design, equipment inventory, cyber-security controls, redundancy plan, customer complaint mechanism and incident procedures. It should also establish whether equipment needs type approval or other conformity documentation.

A contract with a vendor claiming that hardware is PTA approved should be checked against the exact models and intended use. Technical approval of equipment is not necessarily the same as authorisation for the operator's service.

Subscriber contracts and consumer protection

Retail service agreements should clearly state package speed or capacity, fair-use restrictions, prices, taxes, billing period, disconnection grounds, refunds and complaint routes. Advertising a maximum theoretical speed without explaining practical limitations may generate disputes.

The operator should review applicable PTA consumer-protection directions and licence conditions. A clause excluding all responsibility for network outages may be inconsistent with specific quality or service commitments.

Keep records of customer complaints, service interruptions and resolution. These records are useful both for regulatory inspection and defence of commercial claims concerning delivery of a promised service.

Data, identity and network-security duties

A telecommunications operator may handle subscriber identity details, usage information, network logs and payments. The applicable laws, licence provisions and regulatory directions concerning confidentiality, retention and lawful access must be identified.

Contractual privacy language should correspond to operational reality. A small provider that shares every subscriber database with a third-party vendor must know whether that arrangement is permitted and what security obligations apply.

Cybersecurity measures should include controlled administrative access, secure configuration, monitoring, response to compromise and a defined procedure for reporting material incidents under applicable obligations. The operator should not claim absolute security while lacking elementary access controls.

Financial and corporate compliance

A proposed licence may require capital, fees, guarantees, reporting or other financial commitments. Costs of fibre, rights of way, maintenance and customer support can exceed the initial incorporation and licence expenses by a substantial margin.

Prepare a financial model reflecting both upfront network expenditure and recurring regulatory and service costs. Directors should understand personal or corporate undertakings before authorising an application.

If the company subsequently raises capital or changes control, it should review whether its licence requires advance approval or notification, in addition to ordinary SECP filings.

A practical model comparison

Suppose Company A operates an online invoicing platform hosted in a third-party cloud. Its users connect through telecommunications providers of their choosing. Company B installs fibre in residential buildings, sells broadband packages directly, provides customer routers and bills for internet access.

The companies may both describe themselves as internet businesses, but their regulatory classification is materially different. Company B should assess PTA licensing and infrastructure permission before marketing services. Company A should focus on the legal issues relevant to its application, which may include contracts, cybersecurity and sector-specific obligations without necessarily becoming a licensed internet access provider.

The precise result still depends on actual services and current law; a platform that begins carrying communications for others or operating network infrastructure may cross a different regulatory boundary.

Application preparation and regulator correspondence

A prospective operator should obtain PTA's currently published forms and licence conditions for the relevant category and prepare an accurate company profile, technical description, ownership information, business plan and evidence addressing eligibility. Do not invent a universal checklist for every telecom service.

If PTA seeks clarification about coverage, equipment, financial capacity or management, respond to the specific criterion and attach supporting evidence. The company's website and sales documents should match the activities described in its application.

Maintain records of submissions, fees, regulator observations, granted licence and continuing obligations. The company should not begin a broader service merely because it has one earlier approval.

Enforcement and dispute exposure

Operating a regulated service without authorisation can expose a business to regulatory action under the applicable telecommunications law. The legal consequences depend on the exact activity, statutory provisions and findings, and may differ from an ordinary consumer contract dispute.

If PTA issues a notice or direction, obtain the underlying legal provision and factual basis, identify any statutory hearing or appeal route and preserve records. A company should not assume that judicial review can substitute for every applicable regulatory appeal.

The best compliance strategy is advance classification and licensing, not rebranding a network operation after an enforcement inquiry begins.

Opinion and recommended approach

A Pakistani business that actually supplies internet connectivity or operates telecommunications infrastructure should obtain a service-specific licensing assessment and the required PTA authorisation before starting regulated operations. Incorporation at SECP, purchase of network equipment or an agreement to buy wholesale bandwidth does not automatically resolve the licensing position.

Prepare a matrix of network ownership, services sold, geographic scope, interconnection, spectrum, customer contracts and technical compliance. Verify the current PTA licence category and additional infrastructure permissions. Distinguish pure digital applications from network access provision based on their real functions.

Principal authorities for verification: Pakistan Telecommunication (Re-organization) Act, 1996; PTA's current licensing framework, service-specific authorisations and conditions; applicable telecommunications policy, rules and consumer-protection directions; and any relevant spectrum, type-approval and local infrastructure permission requirements.