Bangladesh

Personal Data Protection Ordinance, 2025 (Ordinance No. 61 of 2025)

On 6 November 2025, the President of Bangladesh issued the Personal Data Protection Ordinance, 2025 (Ordinance No. 61 of 2025) to establish a legal framework for the ownership and protection of personal data. The Ordinance aims to safeguard fundamental rights, particularly data privacy and security, while encouraging responsible innovation and a digital economy through lawful processing practices. It establishes obligations for data fiduciaries and processors regarding accountability, transpa...

Cyber Security Ordinance, 2025 (Ordinance No. 25 of 2025)

On 21 May 2025, the Cyber Security Ordinance, 2025 (Ordinance No. 25 of 2025), which repealed the Cyber Security Act 2023, entered into force with its publication in the official Gazette. The aim of the policy is to ensure cyber security and the identification, prevention, and suppression of offences committed in cyberspace while protecting fundamental rights such as freedom of expression. The ordinance enshrines the National Cyber Security Agency and the National Cyber Security Council as re...

Cyber Security Act 2023 (Act No. 39 of 2023)

On 18 September 2023, the Cyber Security Act 2023 (Act No. 39 of 2023), which repeals and replaces the Digital Security Act 2018, entered into force with its publication in the Official Gazette. The aim of the policy is to ensure cyber security and establish provisions for the identification, prevention, and suppression of crimes committed through digital or electronic media. The Act establishes a National Cyber Security Agency and a National Cyber Security Council to oversee the protection o...

Cross-Border Data Transfer Regulation in Data Protection Act

On 16 July 2022, the Bangladesh Department of Information and Communication Technology (ICT) released the draft Data Protection Act 2022. The draft outlines requirements for the cross-border transfer of personal data. In particular, the draft specifies that entities that want to transfer data outside the country will have to obtain authorization from the government.

Data Protection Authority Governane Regulation in Data Protection Act

On 16 July 2022, the Bangladesh Department of Information and Communication Technology (ICT) released a draft Data Protection Act (2022). In particular, the draft would allow for the creation of a Data Protection Office under the oversight of the Digital Security Agency. The Data Protection Office would have the power to implement the Act, open investigation into compliance with the data protection requirements and conduct audits.

Data localisation requirement in Data Protection Act

On 16 July 2022, the Bangladesh Department of Information and Communication Technology (ICT) released the draft Data Protection Act 2022. The draft specifies that sensitive personal data and data generated by users have to be stored in the country.

Draft Regulation on Digital, Social Media, and OTT Platforms

On 18 February 2022, the Bangladesh Telecommunication Regulatory Commission (BTRC) closed the consultation on its draft regulation for "Digital, Social Media, and OTT Platforms". The draft outlines duties of intermediaries, such as a maximum user data collection period of 180 days after cancellation or withdrawal. Additionally, intermediaries tasked with securing the data according to national security standards and regulations. Furthermore, the draft includes the obligation to introduce a co...

1 National AI Policy Bangladesh 2026-2030 (DRAFT V1.1)

1 Bangladesh National AI Policy 2026-2030 Draft v2 February 9, 2026

Data transfer measures in United States-Bangladesh Agreement on Reciprocal Trade

On 9 February 2026, the United States and Bangladesh signed the Agreement on Reciprocal Trade. Under the Agreement, Bangladesh commits to allowing the free transfer of data across trusted borders, removing barriers in the insurance market and digitalising its customs procedures. The Agreement also provides for cooperation on export controls and the exchange of information on inbound investment, and includes a commitment by Bangladesh to adopt and implement specified regulatory practices. Both...

Cyber Security Act, 2023 (সাইবার নিরাপত্তা আইন, ২০২৩)

AI law in Bangladesh: The Cyber Security Act, 2023 (Act No. 46 of 2023) is a comprehensive national law enacted by the Jatiya Sangsad to replace and consolidate provisions of the Digital Security Act, 2018 and related ICT provisions. It establishes institutional governance for cyber security, defines offences relating to cybercrime and critical information infrastructure, and sets out reporting, prevention, enforcement and penalty regimes....

Digital Security Act, 2018

AI law in Bangladesh: The Digital Security Act, 2018 (DSA) is a Bangladesh national statute enacted in 2018 to address cybercrime, digital harms, protection of critical information infrastructure and online offences. The Act defines offences related to hacking, digital espionage, false information, defamation, hurting religious sentiments and gives authorities powers for investigation, blocking, removal and prosecution....

National Artificial Intelligence Policy 2024 (Draft)

AI law in Bangladesh: The National Artificial Intelligence Policy 2024 (Draft) sets out Bangladesh’s principles and approach for harnessing AI for public service delivery, economic growth and social development while addressing risks to rights, security and privacy. The draft proposes the establishment of a National AI Centre of Excellence, an advisory council, sectoral adoption pathways and a risk-based governance approach while recommending legislation to operationalize enforcement and liability mechanisms....

Agency to Innovate (a2i) Bill / Agency to Innovate Act 2023

AI law in Bangladesh: The Agency to Innovate (a2i) Act 2023 establishes a statutory national innovation agency (a2i) to promote technology-driven public service innovation, build a knowledge-based society, and transfer existing a2i programme activities to the new body. The Act sets out governance structures, powers to form companies and enter partnerships, funding and reporting obligations, and mechanisms for coordination with government ministries and international partners....

Bangladesh Telecommunication Regulatory Commission Regulation for Digital, Social Media and OTT Platforms (draft)

AI law in Bangladesh: A 2021–2022 draft regulation prepared by the Bangladesh Telecommunication Regulatory Commission (BTRC) to govern digital platforms, social media, and OTT services accessible in Bangladesh. The draft proposes obligations including registration, local compliance personnel, content takedown timelines, data retention, and traceability requirements — provisions that have drawn sustained criticism from rights groups and international observers for potential impacts on freedom of expression and privacy....

National Strategy for Artificial Intelligence: Bangladesh (National Strategy for Artificial Intelligence Bangladesh)

AI law in Bangladesh: The National Strategy for Artificial Intelligence – Bangladesh is a government-published strategic roadmap (March 2020) prepared by the Information and Communication Technology Division to guide responsible AI adoption across priority sectors. It sets six strategic pillars (R&D, skilling, data & infrastructure, ethics/privacy/security & regulation, funding/acceleration, industrialization) and sectoral action plans for public service delivery, manufacturing, agriculture, mobility, skills & education, finance & trade, and health....