Bangladesh
ModerateDigital Security Act 2018 + Cyber Security Act 2023
Authority: Bangladesh Telecommunication Regulatory Commission (BTRC) | Enforcement: partial | Enacted: September 2023
Overview
Bangladesh does not have a standalone data protection law. Protections derive from the Cyber Security Act 2023 (replacing the Digital Security Act) and constitutional privacy rights. A dedicated Data Protection Act has been drafted.
14-Topic Coverage
Data Protection Authority
Partially AddressedBTRC oversees telecom data. Digital Security Agency handles cybersecurity. No dedicated DP authority.
Consent Requirements
Partially AddressedSome consent provisions in Cyber Security Act and ICT Act. No comprehensive framework.
Data Subject Rights
Partially AddressedConstitutional privacy rights. Limited statutory data subject rights.
Cross-Border Transfer
Not AddressedNo comprehensive cross-border transfer framework.
Breach Notification
Partially AddressedCyber Security Act has some incident reporting provisions.
DPO Requirements
Not AddressedNo DPO requirement.
Children's Data
Partially AddressedSome provisions under the Children Act. No specific data protection provisions.
Penalties & Enforcement
Partially AddressedCyber Security Act penalties. Limited data-specific enforcement.
Sector-Specific Rules
Partially AddressedBangladesh Bank financial data rules, telecom regulations.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Partially AddressedSome financial and government data localisation requirements.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedRight to Information Act 2009. Government data protected by various regulations.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Bangladesh's regulations.
Book a Consultation