Inside Bangladesh’s CyberspaceRecommendation

4 laws Bangladesh needs.

Three proposed statutes and an AI strategy. These are our recommendations, not enacted law.

Proposed law

Online Safety Act

One law for online harms and cybercrime, built on platform duties rather than broad criminal bans.

The problem today

Laws on online harm are fragmented and outdated. They lean on broad criminal offenses, vague definitions, executive discretion and reactive takedowns, while doing little about platform design, transparency and accountability.

What we propose

We propose one rights-respecting law covering harmful content and cybercrime together, with duties matched to each platform’s type, functions and risk instead of broad criminal bans.

Who it would cover
  • User-generated content platforms
  • Streaming and subscription services
  • Online intermediaries
  • App stores
  • Messaging services
  • AI-enabled systems
  • Recommender systems
  • Hosting providers

What it would include

  1. Duties of care that scale

    Platforms would assess, prevent and respond to serious online harms, in proportion to their size and risk.

  2. Notice-and-action with safeguards

    A clear, time-bound process for acting on lawful notices about unlawful content, with counter-notices and protection against abusive takedown requests.

  3. Ways to report and appeal

    Accessible, multilingual ways to report harm, get remedies, contest moderation decisions and appeal.

  4. Public transparency reports

    Regular public reports on content moderation, recommendation systems, advertising, complaints and government requests.

  5. Stronger protection for those most at risk

    Enhanced protection for children, women, journalists, minorities, LGBTQ+ communities and persons with disabilities.

  6. An independent regulator

    An independent, technically specialized authority to oversee compliance, conduct audits and impose penalties.

  7. Cybercrime, defined precisely

    Clear offenses for hacking, ransomware, phishing and identity theft, with legal protection for good-faith security research.

What would change for you online

  • You could report harm, contest a moderation decision and appeal.
  • Platforms would publish what they remove and what the government asks of them.
  • Organizations would have to report cyber incidents and data breaches within set time limits.
Proposed law

Regulation of Investigatory Powers Act

One law for surveillance and interception, with a judge’s approval first and layered oversight.

The problem today

Surveillance and interception powers are spread across several statutes, licenses, government orders and agency mandates that are not fully public, without clear legal thresholds, independent authorization, oversight, transparency or redress.

What we propose

We propose an independent national review and public consultation, then one law that brings these powers together and balances state security with fundamental rights.

Layers of oversight
  1. 1Prior judicial authorization
  2. 2An independent surveillance commissioner
  3. 3A parliamentary committee
  4. 4Periodic independent audits
  5. 5Annual public transparency reports

What it would include

  1. A judge approves first

    Interception and device searches would need prior authorization by an independent court, limited to serious offenses and genuine national-security threats.

  2. No bulk surveillance

    Bulk, indiscriminate or untargeted surveillance would be prohibited except under an exceptional framework with heightened safeguards.

  3. Limits on what is kept

    Strict time limits, data minimization, retention and deletion rules, and audit trails for everything collected.

  4. Protected communications

    Higher thresholds for legally privileged, journalistic, parliamentary and medical communications.

  5. Written orders only

    Companies would assist only under lawful, written, reviewable orders; informal or politically directed requests would be prohibited.

  6. Rules for spyware

    Buying and using spyware, facial recognition and similar tools would need legal authorization, audits and limits on use against journalists and activists.

What would change if you are monitored

  • You would be told about surveillance once it no longer prejudices an investigation, and could complain, seek judicial review and compensation.
  • Evidence obtained unlawfully would be excluded.
  • Aggregate statistics on surveillance orders would be published.
Proposed law

Digital Commerce Act

One platform-aware law for buying and selling online, from marketplaces to social commerce.

The problem today

Digital commerce relies mainly on policies, guidelines and voluntary codes without binding force. It is unclear whether selling through Facebook, Instagram, WhatsApp, TikTok or Telegram is covered.

What we propose

We propose a technology-neutral, platform-aware digital commerce law, with obligations matched to how each kind of platform works.

One size does not fit all
  • B2CBusiness to consumerAmazon, Daraz
  • B2BBusiness to businessAlibaba
  • C2CSocial commerceFacebook Marketplace, TikTok Shop
  • C2BConsumer to businessUpwork, Shutterstock
  • B2B2CSeller ecosystemsShopify-enabled marketplaces
  • Super-appsMobile commercebKash, Uber, Pathao

Facebook Marketplace mainly facilitates advertising and offline deals; TikTok Shop runs payments, recommendations, logistics and fulfillment on the platform.

What it would include

  1. Clear rules for online contracts

    Rules on electronic contracts, digital signatures, terms of service, returns, refunds and statutory guarantees.

  2. Reach to offshore platforms

    Narrow rules for offshore platforms serving users in Bangladesh, while avoiding jurisdictional overreach.

  3. Guards against scams and tricks

    Safeguards against fraud, counterfeits, deceptive pricing, dark patterns, fake reviews and influencer marketing abuses.

  4. Know who is selling

    Seller verification, traceability of commercial actors and disclosure of sponsored advertising.

  5. Fast, low-cost complaints

    Online dispute resolution with response deadlines, transparent refunds and low-cost redress for consumers and small businesses.

  6. Smoother cross-border trade

    Digitized customs, simpler procedures for low-value shipments and interoperable payment and logistics systems.

What would change when you buy online

  • You would know who you are buying from.
  • Complaints would get answers within set timelines, with transparent refunds.
  • Fake reviews, dark patterns and AI-generated scams would be targeted.
Proposed strategy

AI Strategy

Not a rigid AI law yet: a flexible, principles-based strategy first.

The problem today

AI is entering courts, policing, health care, education, finance and public administration, bringing opportunities alongside serious risks to rights, democratic governance and public trust.

What we propose

We propose avoiding rigid technology-specific legislation for now. Start with a national strategy, ethical guidelines, technical standards, regulatory sandboxes and sector codes, then consider statutory regulation.

Rules that follow the risk
  1. ProhibitedUnlawful biometric mass surveillance, social scoring, discriminatory profiling, unlawful predictive policing
  2. High-riskImpact assessments before use in sensitive sectors
  3. Limited-risk
  4. Minimal-risk

What it would include

  1. Risk-based rules

    Rules that distinguish prohibited, high-risk, limited-risk and minimal-risk AI systems.

  2. Bans on the most harmful uses

    Prohibit or strictly limit unlawful biometric mass surveillance, social scoring, discriminatory profiling and unlawful predictive policing.

  3. Check before deploying

    Human rights, privacy and safety impact assessments for high-risk AI before it is used in sensitive sectors.

  4. A human in the loop

    Human oversight, explanations and a way to challenge AI-assisted decisions about jobs, health care, education, credit or housing.

  5. Label AI and deepfakes

    Tell people when they interact with AI or AI-generated content, and label deepfakes and synthetic media.

  6. Build local capacity

    Support open research, local-language AI, accessibility technologies and digital inclusion.

What would change when AI decides about you

  • You would be told when you are dealing with AI, and deepfakes would be labeled.
  • You could challenge an AI-assisted decision about your job, health care, education or credit.

How others do it

Comparative Laws, by proposal.

Referenced to show different approaches, not as models for adoption.

Open a proposal to see the laws, grouped by jurisdiction and linked to their texts.

For an Online Safety Act26 laws from 5 jurisdictions
For investigatory powers19 laws from 6 jurisdictions
For digital commerce18 laws from 5 jurisdictions
For an AI strategy26 laws from 13 jurisdictions

By jurisdiction

Global Partnership on AI 1