One act.
Many laws.

Personal Data Protection Act§§11–14

Gives you the right to see, correct, update or delete your data, withdraw consent and object to processing.

• Fines up to BDT 2,500,000, or BDT 5,000,000 for significant data controllers

National Data Management Act§§30(6), 32

Connects national ID, passport, tax, address, birth-registration and driving-license databases to one national data exchange.

Personal Data Protection Act§29(6)

Cross-border transfers follow a notification model rather than localization.

National Data Management Act§§30(6), 31, 32

Can require the listed foundational databases to be stored in national data centers.

Personal Data Protection Act§20

Requires a breach to be reported to the data authority only when it is likely to cause significant damage.

National Data Management Act§§23, 30, 33

Names security principles for national systems but leaves incident response, encryption standards and vulnerability disclosure to future regulations.

Cyber Protection Act§§17–19

Criminalizes illegal access to critical infrastructure, devices and networks, and phishing, malware and ransomware.

Personal Data Protection Act§24

Waives consent on grounds including national security, public order and the investigation of crimes; its other rules still apply.

Bangladesh Telecommunication Act§§84, 97A

Sets up a central interception platform and lets the regulator compel any document or information.

Cyber Protection Act§§33–35

Lets investigators take devices and data; search, seizure and arrest without a warrant are limited to hacking cases where evidence could be lost.

Bangladesh Telecommunication Act§61

Lets inspectors looking for unlicensed equipment examine records, question people, arrest someone likely to flee and seize equipment.

Pornography Control Act§6

Allows search and seizure; seized devices and data can be presented openly in court.

Cyber Protection Act§26

Criminalizes posting religious, communal or ethnic hate speech that causes violence or anxiety. Arrest needs a warrant.

• Up to 2 years, a fine up to BDT 1,000,000, or both

Bangladesh Telecommunication Act§§66, 66A

Penalizes “false or fraudulent” messages and a broad range of online conduct.

• Up to 5 years, a fine up to BDT 490,000,000, or both “False or fraudulent” messages
• Up to 5 years, a fine up to BDT 990,000,000, or both A broad range of online conduct

Penal Code§§124A, 153A, 295A, 499, 505A

Keeps colonial-era offenses on sedition, enmity between groups, religious feelings and public order, plus criminal defamation.

• Up to life imprisonment The most severe listed speech offenses
• Up to 2 years and/or a fine Criminal defamation

Personal Data Protection Act§9

Requires a parent’s or guardian’s consent for a child’s data, and regard for the child’s rights and interests.

Cyber Protection Act§25

Covers child sexual abuse material, with higher penalties for crimes against women and children.

• Up to 5 years, a fine up to BDT 2,000,000, or both When committed against a woman or a child

Pornography Control Act§8

Punishes child pornography more heavily than adult material, yet producing pornography and coercing a child can draw the same penalty.

• Up to 10 years + up to BDT 500,000 Child pornography
• Up to 7 years + up to BDT 200,000 Producing pornography, or forcing a person, including a child, to take part

Cyber Protection Act§25

Covers content used for sexual harassment, revenge porn, child sexual abuse material, sextortion and blackmail. Arrest without a warrant.

• Up to 2 years, a fine up to BDT 1,000,000, or both
• Up to 5 years, a fine up to BDT 2,000,000, or both When committed against a woman or a child

Pornography Control Act§§4, 8, 10

Prohibits producing, possessing, selling or displaying pornography, with graded penalties. Arrest without a warrant.

• Up to 10 years + up to BDT 500,000 Child pornography
• Up to 5 years + up to BDT 200,000 Blackmail or humiliation using pornography

Penal Code§509

Makes insulting a woman’s “modesty” an offense.

Cyber Protection Act§8

Lets authorities remove or block content; if a tribunal does not approve in time, the content must be restored.

Bangladesh Telecommunication Act§30(1)(j)

Lets the telecom regulator take necessary action on intermediaries and social media, including issuing directives.

Cyber Protection Act§§27, 29

Punishes aiding an offense like the offense itself; when a company offends, staff directly involved must prove they did not know or tried to prevent it.

Bangladesh Telecommunication Act§76

Attributes a company’s offenses to its directors, managers, employees and representatives unless they show lack of knowledge or due diligence.

Cyber Protection Act§43

Admits forensic evidence gathered under the law, despite anything to the contrary in the Evidence Act, 1872.

Bangladesh Telecommunication Act§97B

Makes intercepted communications admissible in court if lawfully approved and their chain of custody is proven.

Pornography Control Act§6

Allows seized devices and data to be presented openly as evidence in court.