Article 12 (4) of the Privacy Act prohibits the disclosing, making public, or transferring of the certain data of an individual, without the consent of the data owner. The Act is applicable during collection, storage, processing, use, analysis and preservation of personal information of any individual residing in Nepal or individuals located in Nepal. However, the Act is silent on extra-territorial applicability and is unclear on whether it is applicable on foreign entities not having physical presence in Nepal. https://www.lawimperial.com/data-protection-and-privacy-legislation-in-nepal/