Kathmandu In a landmark move aimed at enhancing data privacy and cybersecurity in Asia, Malaysia-based consultancy Data Protection Experts Asia Sdn Bhd (DPEX Asia) has signed a strategic Memorandum of Understanding (MoU) with Nepal’s leading cybersecurity firm One Cover Pvt. Ltd. 
The collaboration is centered on drafting Nepal’s first Personal Data Protection Bill—a crucial development in the nation’s digital legal framework.

The MoU was formally signed in Kathmandu by Professor Abu Bakar Munir, Chairman of DPEX Asia, and Chiranjibi Adhikari, CEO of One Cover. The five-year partnership will also advance cybersecurity awareness, strengthen regional data governance, and align Nepal’s digital transformation with global standards such as the General Data Protection Regulation (GDPR).

“This partnership brings us a global perspective on data protection, which is vital as Nepal prepares to introduce its first data privacy legislation,” said Adhikari.
DPEX Asia brings deep expertise in data protection regulations across Malaysia, Brunei, Indonesia, and the Gulf, while One Cover contributes rich local knowledge in ICT policy and cybersecurity strategy. Their joint mission is to create a secure, privacy-respecting digital ecosystem in Nepal and potentially across Asia.

Key Objectives of the MoU:
Drafting and development of Nepal’s Personal Data Protection Bill
Promotion of cybersecurity standards and public awareness
Strengthening national and regional data governance
Advocacy for global best practices in digital transformation

About the Organizations:
DPEX Asia, a pioneer in data privacy consulting, provides services such as Data Protection Impact Assessments (DPIAs), Privacy by Design (PbD), and compliance audits across Asia and the Middle East. Headquartered in Malaysia, it is led by renowned legal expert Prof. Abu Bakar Munir.
One Cover Pvt. Ltd., based in Kathmandu, specializes in information systems audits, digital risk management, and network security. Since 2018, it has supported over 30 governmental and private institutions in Nepal and collaborates with global leaders like IBM and TechCERT.
While the MoU is not legally binding, it underscores a growing regional commitment to cybersecurity maturity. As Asia pushes for digital sovereignty and resilience, this partnership may serve as a model for future-ready, GDPR-aligned data protection policies across the continent.