BPO Services Agreement (Pakistan)

A BPO Services Agreement in Pakistan governs the supply of professional services, fixing the fee, the standard of performance expected and how either side may end the engagement.

Pakistan's BPO industry is regulated at the sector level primarily by the Pakistan Telecommunication Authority established under the Pakistan Telecommunication (Re-organisation) Act 1996. BPO companies providing call centre services, value-added services, or internet-based services must be licensed by the PTA. The Pakistan Software Export Board (PSEB), established under the Ministry of Information Technology and Telecommunication, promotes Pakistan's IT and IT-enabled services (ITeS) exports, including BPO services, and registers BPO companies for export facilitation purposes — companies registered with PSEB may obtain SBP approval to retain foreign exchange earnings in foreign currency accounts under the Foreign Exchange Regulation Act 1947.

The Contract Act 1872 governs the fundamental enforceability of the BPO agreement — Section 10 requires free consent, lawful consideration, and lawful object for the contract to be valid. Section 73 provides for damages for breach of contract, and Section 74 provides for the enforcement of liquidated damages or penalty clauses — both commonly included in BPO agreements to address service level failures. Under Section 27 of the Contract Act 1872, non-compete clauses in BPO agreements are subject to the restraint of trade doctrine — clauses that are unreasonable in geographic scope or duration may be unenforceable under Pakistani courts' interpretation of Section 27.

Data protection and privacy in BPO agreements gained regulatory importance following Pakistan's enactment of the Personal Data Protection Act 2023 (PDPA), which establishes rights of data subjects and obligations of data controllers and processors. A BPO provider processing personal data on behalf of a client qualifies as a data processor under the PDPA — the BPO Services Agreement must therefore comply with Section 28 of the PDPA which requires a written processing agreement specifying the subject matter, duration, nature, and purpose of processing, the type of personal data, and the categories of data subjects. The PDPA is administered by the National Commission for Personal Data Protection (NCPDP).

For BPO agreements involving banking, insurance, or financial services outsourcing, the State Bank of Pakistan's Outsourcing Guidelines for Financial Institutions and the SECP's circulars on outsourcing impose additional requirements — including mandatory risk assessments, audit rights over the service provider, data localisation requirements for certain financial data, and notification obligations to the SBP or SECP before material outsourcing arrangements are entered into.

Export-oriented BPO companies in Pakistan benefit from an income tax exemption on export income under the Second Schedule to the Income Tax Ordinance 2001, subject to conditions including PSEB registration and receipt of export proceeds through banking channels within the period specified by the SBP's foreign exchange regulations.

A BPO Services Agreement in Pakistan is required in a range of commercial and regulatory situations involving outsourcing of business processes to third-party providers.

A BPO Services Agreement is needed when a Pakistani company — or a multinational company with operations in Pakistan — outsources customer service, technical support, or sales functions to a call centre operated by a separate BPO provider. Pakistan's BPO sector includes major providers such as TeleCommunication International (TCI), Inbox Business Technologies, and numerous smaller operators certified by PSEB and licensed by PTA, providing services to clients in the United States, United Kingdom, Canada, Australia, and the Gulf states.

A BPO Services Agreement is required when a bank, insurance company, or other financial institution regulated by the State Bank of Pakistan (SBP) or SECP outsources non-core functions — such as cheque processing, loan origination support, claims processing, or anti-money laundering transaction monitoring — to a third-party processor. SBP's Outsourcing Guidelines require a formal written agreement covering service standards, data security, audit rights, and business continuity.

A BPO Services Agreement is needed when a company outsources its accounting, payroll processing, or human resources management functions to a firm providing finance and accounting outsourcing (FAO) or human resources outsourcing (HRO) services. The agreement must address the provider's access to sensitive payroll data, employee records, and financial information in compliance with the Personal Data Protection Act 2023.

A BPO Services Agreement is required when an overseas company — particularly from the United States, United Kingdom, Canada, or Australia — engages a Pakistani BPO company registered with the Pakistan Software Export Board (PSEB) to provide back-office services, data processing, or knowledge process outsourcing (KPO) on an offshore basis. The agreement typically incorporates the client's country's data protection requirements alongside Pakistan's PDPA obligations.

A BPO Services Agreement is needed when a healthcare company outsources medical billing, medical transcription, or healthcare information management to a Pakistani BPO provider — requiring specific HIPAA-compliant data handling provisions if US-based client data is involved, alongside compliance with Pakistan's Personal Data Protection Act 2023.

A BPO Services Agreement is required when an e-commerce company outsources order processing, customer support, returns management, or logistics coordination to a BPO provider, to clearly define the provider's responsibilities, performance metrics, liability for errors, and data security obligations.

A valid BPO Services Agreement in Pakistan under the Contract Act 1872 and applicable sector regulations must contain the following essential elements.

Party Details: Full legal names and addresses of the client and the BPO services provider; SECP company registration numbers (CRN) and National Tax Numbers (NTN) registered with FBR; PTA licence number of the BPO provider (if applicable); and PSEB registration number for export-oriented BPO companies.

Scope of Services: A detailed and precise description of the business processes being outsourced — including the categories of services (call centre, data processing, finance and accounting, HR, IT helpdesk), the process specifications, the service delivery model (onsite, offshore, or hybrid), and the technology platforms and software applications to be used. Vague scope descriptions are a leading source of disputes in Pakistani BPO agreements.

Service Level Agreement (SLA): Quantified performance standards — including response time targets, resolution time targets, uptime guarantees (typically 99.5% or higher for IT-enabled services), quality accuracy rates, call abandonment rates (for call centres), and error rates. The SLA must specify the measurement methodology, reporting frequency, and the consequences of SLA failure — typically service credits under Section 74 of the Contract Act 1872.

Fees and Payment Terms: The fee structure — whether fixed monthly retainer, transaction-based pricing (per call, per ticket, per transaction), or a hybrid model. Payment currency (PKR or foreign currency), payment method (bank transfer via SWIFT or IBFT), and invoicing frequency. For export arrangements, the agreement must comply with SBP's export proceeds repatriation requirements under the Foreign Exchange Regulation Act 1947 and SBP's Foreign Exchange Manual.

Data Protection and Confidentiality: Obligations under the Personal Data Protection Act 2023 — identifying the client as data controller and the BPO provider as data processor; specifying the categories of personal data processed; requiring the provider to process data only on the client's documented instructions; imposing security measures; requiring notification of data breaches; and restricting sub-processing. A standalone Non-Disclosure Agreement or a confidentiality clause covering trade secrets and business information beyond personal data should also be included.

Intellectual Property: Ownership of deliverables, work product, and intellectual property created by the BPO provider in the course of providing services — typically assigned to the client. Licensing of the client's proprietary software, data, or trademarks to the BPO provider for service delivery purposes.

Term, Termination, and Exit Management: Contract duration (typically one to three years with renewal options); termination for cause (SLA failure, insolvency, data breach, regulatory non-compliance); termination for convenience (with appropriate notice period — typically 30 to 90 days); and exit management obligations — knowledge transfer, data return, system handover, and transition assistance to a successor provider or back to the client.

Governing Law and Dispute Resolution: Governing law of Pakistan (Contract Act 1872, PDPA 2023); dispute resolution mechanism — typically escalation to senior management, followed by mediation, followed by arbitration under the Arbitration Act 1940 (to be replaced by the International Commercial Arbitration Act when enacted) or the international arbitration rules of the Pakistan International Arbitration Centre (PIAC) for cross-border agreements.

Forms-legal.com provides this BPO Services Agreement (Pakistan) template as a starting point. Companies entering major BPO arrangements — particularly those involving cross-border data flows, financial services outsourcing regulated by SBP, or government-related processes — should engage an Advocate enrolled at the Lahore, Sindh, or Islamabad Bar Council with expertise in technology contracts and data protection law.

Under the Companies Act 2017, the Securities and Exchange Commission of Pakistan (SECP) maintains the register of Pakistani companies. Section 16 of the Companies Act 2017 governs company incorporation. The Contract Act 1872 governs general contractual obligations. The Federal Board of Revenue (FBR) administers corporate tax under the Income Tax Ordinance 2001. The High Courts (Lahore, Sindh, Peshawar, Balochistan, Islamabad) have original and appellate jurisdiction.