Legal Framework and Statutory Overview
Classification of Digital Offences and Penalties
Under the CSA 2023, offences are categorized based on their impact on national security, public order, and individual privacy. Notably, several sections have been made bailable, shifting the legislative stance from the previous 2018 Act.
| Section | Nature of Offence | Maximum Penalty (Individual) | Corporate Liability |
|---|---|---|---|
| Section 17 | Hacking/Damage to Critical Information Infrastructure | 9 Years Imprisonment / ৳1 Crore Fine | Section 49 Application |
| Section 25 | Transmitting False or Obscene Information | 2 Years Imprisonment / ৳3 Lakh Fine | Vicarious Liability |
| Section 26 | Collecting/Using Identity Information without Consent | 2 Years Imprisonment / ৳5 Lakh Fine | Data Breach Liability |
| Section 33 | Hacking Related Crimes | 10 Years Imprisonment / ৳1 Crore Fine | Asset Forfeiture |
Corporate Compliance Roadmap
For corporations, compliance is not merely operational but a statutory necessity under Section 49 of the CSA 2023, which stipulates that if a company commits an offence, every owner, director, and officer shall be deemed guilty unless they prove the offence was committed without their knowledge.
Key Compliance Obligations
- Critical Information Infrastructure (CII): Entities designated as CII under Section 15 must adhere to strict security protocols issued by the National Cyber Security Agency.
- Data Privacy: Unauthorized access or disclosure of personal data is punishable under Section 26. Companies must implement robust encryption and access controls.
- Assistance to Law Enforcement: Under Section 40, the Director General of the Agency has the power to require assistance from any person or entity for decryption or data retrieval.
- Corporate Liability: Pursuant to Section 49, companies must maintain a 'Due Diligence' log to protect directors from vicarious criminal liability.
Consult Barrister Liton Asaduzzaman Sarkar
Ensure your corporate digital infrastructure meets the stringent requirements of the Cyber Security Act 2023.
Schedule a Compliance AuditFrequently Asked Questions
Can a company be held criminally liable for a data breach under CSA 2023?
Yes. Under Section 49 of the Cyber Security Act 2023, if a company commits an offence, every director, manager, and secretary is deemed guilty unless they can prove the offence occurred without their knowledge or that they exercised all due diligence to prevent it.
What are the penalties for hacking under the new Act?
Hacking is governed by Section 33 of the Cyber Security Act 2023, providing for a maximum penalty of 10 years imprisonment or a fine not exceeding 1 Crore Taka, or both.
Is identity theft a bailable offence under CSA 2023?
Under Section 26 of the Cyber Security Act 2023, collecting or using identity information without legal authority is a bailable offence, carrying a penalty of up to 2 years imprisonment or a 5 Lakh Taka fine.
◆ Related Statutory Guides & Practice Insights
<li style="margin-bottom:12px; line-height:1.5;">
<a href="/en/ai-copyright-deepfakes-intellectual-property-bangladesh/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">• AI Copyright, Deepfakes & Intellectual Property Protection in Bangladesh: A Senior Advocate's Masterclass Handbook</a>
</li>
<li style="margin-bottom:12px; line-height:1.5;">
<a href="/en/cross-border-saas-cloud-hosting-data-protection-bangladesh/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">• Cross-Border SaaS, Cloud Hosting & Personal Data Sovereignty Under Bangladesh Law | LegalBD</a>
</li>
<li style="margin-bottom:12px; line-height:1.5;">
<a href="/en/trademark-registration-guide-instagram-businesses-bangladesh/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">• Trademark Registration for Instagram Businesses in Bangladesh</a>
</li>
<li style="margin-bottom:12px; line-height:1.5;">
<a href="/en/software-licensing-agreements-saas-contracts-in-bangladesh-service-level-agreements-sla-ip-allocation/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">• Software Licensing Agreement SaaS SLA Bangladesh: Legal Guide</a>
</li>