You applied for a loan. The bank said no. The letter said the decision was made by a system, not a person. Nobody explained why.
This is happening more in Pakistan. Banks score you with software. Companies filter job applications with software. Government bodies decide aid and policing with software. The question is simple. What rights do you have when a machine decides your case?
Where AI already decides things for you
Credit scoring is the biggest one. When you apply for a loan or a credit card, the bank checks your record at the State Bank of Pakistan's Electronic Credit Information Bureau, or eCIB. The bureau has kept borrower records since December 1992. Two licensed private bureaus, Tasdeeq and DataCheck, turn that data into scores under the Credit Bureaus Act 2015. A low score can block your loan without any human ever looking at your file.
Job screening is another place. Employers use software to filter applications before a person sees them. Facial recognition is used in policing and identity checks. Courts are also testing AI tools for case management and legal research. We explained where that stands in our guide on AI in Pakistan's courts.
What the law says today
Pakistan has no law that specifically controls AI decisions. But the Constitution still protects you.
Article 4 says every citizen has the right to be dealt with in accordance with law. Article 9 says no person shall be deprived of life or liberty except in accordance with law. Article 14 says the dignity of man is inviolable. Article 25 says all citizens are equal before law, and there shall be no discrimination on the basis of sex. If a scoring model treats one group unfairly, Article 25 is the clause a lawyer would reach for. You can read the full text of these articles in the Constitution of Pakistan.
These rights exist on paper. Courts have shown they are willing to stretch them to new technology. In Mohtarma Benazir Bhutto v President of Pakistan, the Supreme Court held that surveillance without legal backing violates the right to privacy, even though nobody entered anyone's home. The same reasoning can reach an algorithm that scores you.
The one right you can use today: your credit report
Here is something concrete. Under the Credit Bureaus Act 2015, you can ask for your own credit information report. It is your right, and it is free. Checking it does not hurt your record.
If the report has a mistake, there is a formal correction process. Start with the bank that reported the data. Then take the dispute to the bureau that gave you the report. Keep settlement letters and closure certificates. They are the evidence that wins disputes.
What the data protection bill promises
The Personal Data Protection Bill 2023 is still a draft. It has not become law yet. When it does, it gives you the strongest protection on this list.
Section 29 gives you the right not to be subject to a decision based solely on automated processing, including profiling, where that decision creates legal obligations or significantly harms you. It also gives you the right to ask the data controller for specific information about automated decision making, and to get human intervention.
The bill sets up a National Commission for Personal Data Protection. Section 51 lets you complain to the Commission. The Commission must acknowledge the complaint within three working days and dispose of it within thirty days. Section 52 lets you appeal its decision to the High Court.
That is the shape of the future. Today the bill is draft law, so treat these as rights to come, not rights you can enforce this week.
What to do if a system decides against you
- Ask for the reason in writing. Many institutions will give it once you ask.
- Ask for a human. Many banks review a file on request.
- Check your credit report. It is free, it is your right, and it may show the error that sank you.
- Dispute any wrong entry through the bank and the bureau.
- Keep every document. The paper trail is what wins.
- For banks, complain through the State Bank of Pakistan's consumer protection channel. For fraud, file a complaint with FIA cybercrime.
Can you take an AI decision to court?
If the decision came from a government body, yes, in the right case. An aggrieved person can go to the High Court. The court can examine whether the decision followed the law. If an algorithm decided without any legal backing, that is a strong argument.
The Supreme Court has already set the tone for AI in courts. In Ishfaq Ahmed v Mushtaq Ahmed, PLD 2025 SC 582, the Court said AI can help with research and case management, but it cannot decide cases or weigh evidence. We broke down that judgment in our guide on whether you can trust a legal AI.
The honest picture
Pakistan is early in this. There is no AI anti discrimination law on the books. The National AI Policy approved by the federal cabinet in July 2025 is a policy statement, not binding law. What protects you today is the Constitution, your credit report rights, and the courts' willingness to stretch old rights to new machines.
When the data protection law passes, the balance shifts. You get the right to say no to a fully automated decision. You get the right to an explanation and a human. That is worth knowing now, so you can use it the day it becomes law.
If a machine has decided against you, start with a written question. Ask why. Then check your credit report. Then talk to a human. The law in Pakistan is not silent, even if the letter from the bank was.
For more on your rights when technology and law meet, see our guide on why citations matter in AI generated legal advice, or browse all guides on the Lexiber blog. You can also visit Lexiber's home page.
Ask Lexiber free in English or Urdu. It shows you the exact section behind every answer.
