{
  "node_id": "af-atra-framework",
  "title": "Afghanistan ATRA Framework - Constitutional Privacy Obligations and ICT Regulatory Personal Data Provisions",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "Afghanistan's telecommunications and ICT sector is regulated by the Afghanistan Telecom Regulatory Authority (ATRA). The Afghan Constitution of 2004 (which was in force under the Islamic Republic of Afghanistan) established fundamental rights including the right to privacy of personal life and freedom from arbitrary interference with correspondence and communications. The Electronic Transactions Law of Afghanistan and the Law on Access to Information (enacted under the Islamic Republic) provided a legal framework for electronic commerce and transparency that included provisions for the protection of personal data in digital systems. Following the change in government in August 2021, Afghanistan is governed by the Islamic Emirate of Afghanistan, which has taken a different approach to law and governance. The Islamic Emirate does not recognise the 2004 Constitution and has yet to formally promulgate a replacement constitutional or comprehensive statutory framework, creating significant legal uncertainty for all regulatory matters including personal data protection. ATRA continues to operate as the telecommunications regulator. Organisations processing personal data in Afghanistan face extreme governance uncertainty and should seek current guidance from legal counsel with specific expertise in the current Afghan regulatory environment before commencing or continuing personal data processing operations. The prior legal framework remains a reference point while the current legal status is uncertain.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/af-atra-framework.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-cybersecurity-framework-2-0",
    "iso-27001-2022"
  ],
  "primary_citations_count": 6
}