Absolutely. All digital news portals must be registered with the Department of Information and Broadcasting and must comply with the Press Council's directives to be recognized as a legitimate media outlet.

Under the current FDI regime, foreign investors can own up to 80% equity in telecommunications service providers in Nepal.

Data protection is primarily governed by the Privacy Act, 2075 and the Individual Privacy Regulation, 2077. The new Cybersecurity Act (2082) further enhances these protections by mandating strict data handling and storage rules.

VoIP is regulated. Licensed telecommunications operators can provide VoIP services, but unauthorized "bypass" of international gateways remains illegal and subject to criminal prosecution.

The process typically takes 6 to 12 months, involving rigorous technical and financial due diligence by the Nepal Rastra Bank.

While not explicitly named "DPO" in all sectors, large entities and those handling sensitive data are increasingly required by the new cybersecurity framework to designate a point of contact for data security.
 

While cross-border digital services exist, companies with a significant footprint or those requiring specific licenses (like Fintech or Telecom) must generally incorporate a local subsidiary and obtain the necessary regulatory approvals.