Pakistan's outsourcing sector runs on a simple proposition: capable English-speaking staff at a fraction of onshore cost. What decides whether an operator keeps its clients is rarely the pricing. It is licensing, data security and the ability to answer an audit.

Licensing

PTA call centre licence. Call centres in Pakistan operate under authorisation from the Pakistan Telecommunication Authority, and the regime distinguishes categories of operation — domestic and international, in-house and outsourced.

The licence carries conditions on the operation, on the termination of traffic through authorised channels, and on reporting. It is renewed periodically.

This is the point on which operators are shut down. Terminating international voice traffic outside authorised channels — grey traffic — is an offence and is actively enforced, with raids, seizure of equipment and prosecution. Whatever a vendor tells you about routing that reduces cost, verify that it is lawful before you connect anything.

See telecom and PTA licensing.

PSEB registration, which the sector generally requires to access facilitation and incentives.

Company incorporation, NTN and provincial sales tax on services as applicable. See choosing a business structure and setting up a software house.

Employer registrations — EOBI and SESSI. See employer registrations.

What foreign clients actually require

Winning enterprise work in the US, UK or Europe means satisfying a procurement process. Expect to evidence:

  • Data processing terms, with security obligations and breach notification within a short fixed window
  • Where data is stored and accessed, and restrictions on transfer
  • Physical security of the floor — access control, clean desk, no personal phones or storage devices at workstations, CCTV
  • Background checks on agents, documented
  • Certifications — ISO 27001 commonly, PCI DSS where card data is handled, and HIPAA-driven obligations for US healthcare work
  • Call recording, retention and deletion practices
  • Business continuity — power, connectivity and premises redundancy, which in Pakistan means real generator and link redundancy rather than a paragraph
  • Right to audit, including unannounced
  • Sub-contracting restrictions — many clients prohibit it outright

Read these as operational commitments, not boilerplate. A breach notification clause requiring notice within hours is a promise you must be able to keep at 3am. See responding to a data breach and data protection for Pakistani businesses.

Recording, consent and the customer's law

Calls are recorded almost universally, and the rules that bind you are usually the customer's, not Pakistan's.

Some jurisdictions require all-party consent to recording; some require specific disclosures at the start of a call; some restrict calling times, require honouring do-not-call registers, and prohibit automated dialling without consent. Breaches produce regulatory action against your client, and then termination and an indemnity claim against you.

Practical position: get the client's script and compliance requirements in writing, train to them, monitor, and keep the records. Where a client asks you to do something that appears to breach their own market's rules, get the instruction in writing before doing it.

The line you must not cross

Pakistan's outsourcing sector has been damaged by operations running fraudulent campaigns from call centre floors — fake technical support, loan and grant scams, and similar. These attract FIA action, prosecution under PECA and the Penal Code, and, for owners and managers, personal liability.

If you are being asked to run a campaign whose script involves misrepresenting who you are, creating urgency about a non-existent problem, or collecting payment for nothing, that is fraud, and being the outsourced supplier is not a defence. Decline it. See an FIA notice and online fraud and cybercrime complaints.

Diligence your clients as they diligence you: who are they, what is being sold, and does the campaign make sense as a legitimate business?

Employment: a high-turnover, night-shift workforce

The sector's employment profile creates specific obligations.

Contracts and classification. Appointment letters are mandatory. Agents engaged as "contractors" on monthly payments, working fixed shifts under supervision, are employees in substance. See employment contracts.

Night shifts and hours. Working hours, overtime and rest day entitlements apply, and provincial law contains restrictions relevant to night work, particularly for women. Provide transport where the shift pattern requires it, and treat it as a safety obligation rather than a benefit — an incident involving staff transport at 2am is the operator's problem.

Harassment. Mandatory inquiry committee and code of conduct. In a young, mixed-gender, night-shift environment this is not optional and it is checked by clients on audit. See the employer's harassment duties.

Deductions and final settlements. Withholding a final salary over training bonds or equipment is a recurring practice in the sector and is unlawful. Training bonds themselves are enforceable only within narrow limits.

Attrition and poaching. Broad non-competes will not hold under section 27 of the Contract Act; confidentiality and narrow non-solicitation will do more. Client contracts also frequently restrict the client from hiring your staff — make sure that clause is mutual. See protecting your business when an employee leaves.

The client contract

Beyond the compliance schedules, negotiate:

  • Service levels and how they are measured, with credits capped
  • Volume commitments — a client that can drop volume to zero without notice leaves you carrying a trained floor
  • Term and termination, including termination for convenience and the notice required. Ramp-up costs must be recoverable
  • Liability caps, and carve-outs. Clients push for uncapped liability on data breach; negotiate a super-cap rather than accepting unlimited exposure
  • Indemnities, narrowed to matters within your control
  • Currency, payment terms and taxes, including withholding in the client's jurisdiction and treaty relief
  • Governing law and arbitration, with a seat that produces an enforceable award. See enforcing foreign judgments and awards

See software development and SaaS agreements and the contracts every business should have.

Premises and continuity

Power and connectivity redundancy, a lease with adequate term and permitted use, fire safety for a densely occupied floor, and a documented continuity plan. Clients audit these. See commercial lease negotiation.

Getting paid

Export proceeds must come through the banking channel with proper documentation, and the sector's tax treatment depends on that compliance. See withholding tax obligations and repatriating profits and capital.

How the firm can help

We obtain PTA call centre licences and PSEB registration, prepare the security, data, HR and continuity documentation clients audit, negotiate master services agreements and data processing addenda, advise on recording and campaign compliance, and represent operators in regulatory and enforcement proceedings.

See regulatory and compliance, or contact the firm.