Apr 25, 2025

Cybersecurity Challenges in Nepal: Expert Analysis by Chiranjibi Adhikari


Kathmandu,13th April 2025, Chiranjibi Adhikari, a renowned cybersecurity expert and CEO of One Cover Private Limited, recently presented key insights on Nepal’s Data Protection and Privacy Legislation at Sankalpa College Banepa-10, Janagal, Kavrepalanchok, Nepal. His analysis outlined the strengths and gaps in the country’s legal framework, emphasizing the need for reforms to meet global standards.

Key Takeaways from the Presentation

1. Constitutional & Legal Safeguards:

Nepal’s Constitution (2015) guarantees privacy under Article 29, covering personal, residential, and communication-related data.

The Individual Privacy Act (2075) and Regulation (2077) provide legal backing for data protection.

The National Penal Code (2017) criminalizes privacy breaches, including unauthorized surveillance and data leaks.

2. Scope & Limitations:

Protected Data: Personal (biometrics, criminal records) and sensitive (health, financial, political) information.

Territorial Reach: Laws apply only to entities operating within Nepal, leaving gaps in cross-border data governance.

3. Enforcement Challenges:

No Dedicated Regulator: Unlike GDPR, Nepal lacks a data protection authority; complaints must go through district courts.

4. Critical Gaps:

No Data Subject Rights: Nepalese laws don’t grant rights like erasure, portability, or breach notifications.

No Mandatory Disclosure: Organizations aren’t required to report data breaches, increasing risks for citizens.

Expert’s Conclusion

Adhikari stressed that while Nepal’s laws offer basic protections, they lag behind global standards like the EU’s GDPR. He called for:

A dedicated data protection authority,

Stronger penalties and breach notification laws,

Modernized rights for data subjects.

“Without urgent reforms, Nepal risks falling behind in the digital economy while exposing citizens to privacy threats,” he warned.

 

About Chiranjibi Adhikari

As the CEO of One Cover Private Limited, Adhikari is a leading voice in cyber security and data privacy in Nepal. His work focuses on policy advocacy, risk management, and awareness campaigns to strengthen the country’s cyber resilience.

Adhikari, resident of Bharatpur Metropolitan City in Chitwan, specialises in cyber security and networking. He has earned various global certificates and has been focusing on Information Security, IT Governance, Cybersecurity, Artificial Intelligence (AI), and Information Security Management Systems. He has been a strong advocate for youth and startups in the ICT sector.

With over two decades of experience in the ICT field, Adhikari is a prominent figure in Nepal’s cyber security landscape. His commitment to ICT education and raising awareness about internet safety and cybersecurity is evident from the more than 500 programmes he has conducted nationwide. These programmes, primarily targeted at community schools, government agencies, and the private sector, have significantly improved the country’s cyber security situation.

He is a prominent cyber security leader serving as Vice President of the Federation of Computer Association Nepal, Cyber security Advisor to the Nepal Chamber of Commerce, and ICT Expert Member at Nepal Academy of Science and Technology (Government of Nepal). As Founder President of the Center for Cyber security Research and Innovation (CSRI) and Immediate Past President of npCert (Nepal’s CERT), he has significantly shaped Nepal’s cyber security landscape. His distinguished career includes roles as ICT Expert at Nepal Copyright Office and Cyber security Expert at NPCERT (Department of IT, Government of Nepal). A recipient of the National ICT Excellence Award 2024, Adhikari serves as Advisor to BIM Association of Nepal and represents Nepal as Member of the Asia Pacific Regional Internet Governance Forum (APrIGF), demonstrating his commitment to advancing digital security and governance both nationally and regionally.