Legal Bridge LLP®Lahore, Pakistan · Pakistan-law matters
Registration & prevention · Article 09 of 30

SECP, FBR, PSEB and PTA Compliance for Call Centres: Which Registrations and Approvals Does Your Business Need?

An activity-based compliance map that avoids both missing approvals and collecting documents that do not fit the business.

Article 09 of the call-centre legal library

The mistake: asking for “the call centre licence”

A client may ask for a licence, an owner may produce an NTN, and a vendor may point to a dialler invoice. Those documents answer different questions. Begin with the activities, legal entity, premises, workforce, customers and communications setup, then identify the authority and obligation associated with each. [1] [2] [4]

This approach is more reliable than a universal checklist copied from another company. A voice-based operation with several offices will not necessarily have the same requirements as a sole proprietor providing non-voice administrative services.

A compliance map should record both the legal basis and the evidence that the requirement has been satisfied. “Someone applied last year” is not a useful status.

SECP: establish the company and maintain its records

Where a company is the chosen business vehicle, SECP incorporation and continuing corporate obligations matter. The registration process identifies the company; ongoing filings and records reflect changes in its governance and particulars. Incorporation does not automatically authorise every regulated commercial activity. [1]

Make sure client contracts and invoices identify the correct entity. A brand, website or director’s personal account should not obscure who is actually providing the service. Where a sole proprietorship or partnership is used, obtain advice on that structure’s applicable formation, registration and liability position rather than pretending it has company status.

The choice of entity should consider ownership, investment, contractual responsibility and risk. It should not be sold as a way for individuals to avoid liability for their own unlawful conduct.

FBR and provincial tax: registration is only the beginning

FBR’s registration framework distinguishes individuals, associations of persons and companies. Iris enrolment and an NTN identify the taxpayer, but filing, withholding, reporting and payment obligations depend on the applicable law and facts. [2]

Service activities can also raise provincial tax questions. The relevant province, nature of the service, place of provision and any applicable treatment should be assessed by a qualified adviser. This article does not prescribe a universal rate or claim a blanket exemption for every IT-enabled service.

Match reported revenue to genuine contracts and banking records. A description such as “export income” should be supported by the transaction and current rules, not selected solely because the business would prefer a particular tax outcome.

PSEB: identify the correct registration category and locations

PSEB publishes requirements for call centre registration, renewal and branches. Its voice-operation guidance should be checked against the actual services and premises. Provisional approval, full registration and a pending application should be recorded as different statuses. [3] [4]

The business should retain the approval letter and understand its conditions. Where a branch opens or an office moves, assess the update process rather than assuming the principal certificate automatically covers the change.

Registration also creates an administrative evidence trail. Keep the submitted information consistent with the current operator, bank records and operations. Do not improve an application by inventing revenue, customers or employment numbers.

The PSEB-linked IP-whitelisting process is important for legal call centre voice arrangements. However, a business should also examine whether its actual configuration involves activities beyond an ordinary call centre setup. A company cannot treat one approval as blanket permission for unrelated telecommunications services. [4]

Use a simple network-and-service map to identify the provider, relevant IPs, premises, numbers and party controlling the configuration. A foreign supplier’s invoice does not replace the Pakistani regulatory analysis.

Where the arrangement is unclear, obtain advice before launching or changing traffic. The question is not whether a workaround is technically possible; it is whether the proposed operation is authorised and properly documented.

Other obligations should be added because the facts require them

Employment, workplace arrangements, social security, intellectual property, data handling and foreign customer rules may require additional review. Their application depends on the province, workforce and activity; avoid presenting one provincial rule as a universal national answer.

For example, a healthcare billing operation handling protected US patient information raises different questions from an inbound product-information desk. A consumer marketing campaign can engage destination-country calling rules even where the Pakistani company’s registrations are in order. [6] [7] [8]

The compliance map should therefore have an “activity trigger” column. When the business introduces a new service or customer market, the trigger initiates a fresh review instead of relying on a certificate obtained for the previous model.

Create one accountable register, not four disconnected folders

Use a register with the following fields: obligation, responsible authority, applicable entity or location, current status, supporting document, expiry or reporting event, responsible person and next action. Keep access limited because corporate files can contain personal information.

Review this register with finance, operations and the technical administrator. Their records should describe the same business. Resolve discrepancies rather than allowing each department to maintain a different version of the company’s status.

A hypothetical business might have a valid company registration and current tax enrolment, but an unresolved voice-configuration change. The correct conclusion is not “fully compliant” or “entirely illegal”. It is a specific open issue with a named owner, required authority response and operational decision.

Finally, keep criminal-law compliance separate but connected. No combination of registrations authorises fraud, unauthorised identity use or evidence destruction. [5]

Legal Bridge LLP can coordinate a Pakistan-law compliance map and identify areas needing specialist tax, telecommunications or foreign-law input. The review should specify its scope rather than promise universal certification.

Identify activities and entity; Assign the right authority; Record evidence and deadlines; Review changes across departments
Article 09 summary diagram
Article questions

Questions and careful answers

Is an NTN a call centre licence?

No. It identifies the taxpayer within the federal tax framework. It does not replace the relevant call centre registration, telecommunications permissions or lawful campaign requirements.

Does every BPO need SECP incorporation?

Not every business uses a company structure. The correct entity choice and registration obligations depend on the facts. A business using a company must meet the applicable corporate requirements.

Does PSEB registration replace tax compliance?

No. Sector registration and tax obligations address different matters. Review returns, reporting, withholding and provincial questions where applicable rather than treating one certificate as a substitute.

Are all exported call centre services tax-free?

No blanket statement should be made without current tax analysis. Treatment depends on the taxpayer, service, receipts and applicable law. This library does not supply a universal rate or exemption.

Does PTA-related whitelisting cover unrelated telecom services?

Do not assume that. Identify the actual activity and authorisation required. A call centre arrangement should not be extended into a different telecommunications business without a separate review.

Must every branch be considered separately?

Yes, at least as a factual and regulatory review. Check which location-specific records, registrations and voice arrangements apply rather than assuming the main office’s documents cover every site.

Who should own the compliance register?

Assign a senior accountable owner, with inputs from legal, finance, operations and technology. Each obligation should also have an operational owner who can produce evidence of its current status.

What changes should trigger a fresh review?

New premises, ownership changes, new voice infrastructure, additional service lines, remote teams and new customer jurisdictions can change the requirements. Do not wait only for an annual renewal date.

Can a consultant certify universal compliance?

A responsible review should define its scope, evidence and limitations. A generic certificate cannot guarantee that every activity satisfies every corporate, tax, telecom, criminal and foreign legal requirement.

How should unresolved compliance be described to a client?

State the actual status, affected activity and corrective plan accurately. Avoid claiming full approval where an application or clarification is still pending, and agree any necessary operational limits.

Official sources

Primary sources and further reading

These links support the general information in this article. Check the current text, amendments, procedure and forum before relying on a source for a specific matter.

  1. Registration of a company — Securities and Exchange Commission of Pakistan

    Current corporate registration route; entity choice and continuing compliance are separate matters.

  2. Income tax registration — Federal Board of Revenue

    Registration and Iris enrolment. This page does not establish a universal call-centre tax rate or exemption.

  3. Call centre registration, renewal and branch requirements — Pakistan Software Export Board / Tech Destination

    Public operational guidance, not a criminal-law immunity certificate. Portal requirements and charges can change.

  4. Industry facilitation: call centre operations and IP whitelisting guidance — Pakistan Software Export Board / Tech Destination

    Guidance on registration, provisional status, inspections, premises and IP whitelisting. Confirm current application instructions.

  5. Prevention of Electronic Crimes Act, 2016, consolidated text including the 2025 amendments — Pakistan Code, Ministry of Law and Justice

    Primary statute. Read each offence and procedural power separately. The official consolidation was checked; recheck subsequent Gazette amendments before publication or case-specific reliance.

  6. Business associates under HIPAA — US Department of Health and Human Services

    Qualifying billing and claims-processing arrangements may create business-associate duties, including contractual requirements.

  7. Complying with the Telemarketing Sales Rule — US Federal Trade Commission

    Agency guidance must be read alongside the current regulation and subsequent amendments, especially the five-year recordkeeping rule.

  8. How to comply with the rules on live marketing calls — UK Information Commissioner’s Office

    Live calls, objections, TPS/CTPS and special campaign categories. ICO flags review following the Data (Use and Access) Act.

Source links last checked: . This date is not a publication date.

Continue reading

Related call-centre guides

Related Pakistan-law services

Service routes that may be relevant

The right route depends on the conduct, documents, forum and engagement scope.

Corporate and commercial

Pakistan-law advice for companies, founders, shareholders, investors and in-house teams on governance, transactions, contracts, compliance and disputes.

Tax and regulatory

Legal review of FBR and regulatory notices, business records, response strategy, appeals and coordination with accountants and tax professionals.

Browse all legal services

Request consultationWhatsApp