Data Protection and Privacy Law in Bangladesh: Legal Framework

Current Statutory Framework

Privacy in Bangladesh is currently governed by a patchwork of statutes, primarily the Constitution of the People's Republic of Bangladesh (Article 43), the Information and Communication Technology Act 2006, and the Cyber Security Act 2023. The proposed Personal Data Protection Act (PDPA) is set to introduce a centralized Data Protection Authority (DPA).

Key Statutory Provisions

Statute	Relevant Section	Legal Implication
ICT Act 2006	Section 63	Punishment for disclosure of electronic records without consent.
Cyber Security Act 2023	Section 26	Offence regarding identity information theft and unauthorized use.
Contract Act 1872	Section 73	Civil liability and damages for breach of confidentiality clauses.
Income Tax Act 2023	Section 309	Confidentiality of taxpayer information and penalties for disclosure.

The Compliance Roadmap

Operationalizing Compliance

Data Mapping: Identify 'Personal Data' and 'Sensitive Personal Data' as defined under the draft PDPA, including biometric and genetic data.
Lawful Processing: Ensure processing is grounded in Section 63 of the ICT Act 2006 (Consent) or specific statutory mandates.
Cross-Border Transfer: Adhere to Bangladesh Bank circulars for financial data and the upcoming localization requirements under the draft PDPA.
Breach Notification: Establish internal protocols to report data breaches to the Digital Security Agency within the prescribed timelines.

Consult Barrister Liton Asaduzzaman Sarkar

Ensure your tech firm is compliant with evolving Bangladesh data laws.

Schedule a Compliance Audit

Frequently Asked Questions

What is the penalty for unauthorized disclosure of electronic records?

Under Section 63 of the Information and Communication Technology Act 2006, any person who gains access to electronic records without consent and discloses them faces imprisonment for up to 2 years or a fine up to BDT 200,000, or both.

Is identity information protected under Bangladesh law?

Yes, Section 26 of the Cyber Security Act 2023 prohibits the collection, sale, or use of 'Identity Information' (like NID, fingerprints, or digital signatures) without legal authorization, punishable by up to 5 years imprisonment.

Does Bangladesh have a specific Data Protection Authority?

Currently, the Digital Security Agency (DSA) oversees digital safety. However, the draft Personal Data Protection Act (PDPA) proposes the establishment of a dedicated Data Protection Agency to enforce privacy standards.

◆ Related Statutory Guides & Practice Insights

<li style="margin-bottom:12px; line-height:1.5;">
  <a href="/en/trademark-registration-bangladesh-process-fees-timeline/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">&bull; Trademark Registration in Bangladesh: Process, Fees & Timeline</a>
</li>

<li style="margin-bottom:12px; line-height:1.5;">
  <a href="/en/copyright-protection-bangladesh-creators-tech-guide/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">&bull; Copyright Protection in Bangladesh: Guide for Creators & Tech</a>
</li>

<li style="margin-bottom:12px; line-height:1.5;">
  <a href="/en/protecting-software-technology-ip-bangladesh/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">&bull; Protecting Software and Tech in Bangladesh: IP and Trade Secrets</a>
</li>

<li style="margin-bottom:12px; line-height:1.5;">
  <a href="/en/patent-registration-bangladesh-pct-filing-guide/" style="color:#C5A059; font-weight:600; text-decoration:none; font-size:14px; display:inline-block; transition:color 0.2s;">&bull; Patent Registration in Bangladesh: Eligibility & PCT Filing</a>
</li>

← Explore Full Intellectual Property, Technology & Cyber Law Directory →

Official Regulatory Authorities, Gazettes & Forms

Governing Primary Statutes: Trademarks Act 2009, Bangladesh Patent Act 2023, Copyright Act 2023, Cyber Security Act 2023

<div style="margin-bottom:12px; padding-bottom:12px; border-bottom:1px solid #1E293B;">
  <a href="https://dpdt.gov.bd/" target="_blank" rel="noopener noreferrer" style="color:#C5A059; font-weight:600; font-size:14px; text-decoration:underline;">Department of Patents, Designs and Trademarks (DPDT) &nearr;</a>
  <p style="color:#94A3B8; font-size:12px; margin:4px 0 0 0; line-height:1.4;">Official Trademark Journal, Patent Applications & IP Opposition Gazettes</p>
</div>

<div style="margin-bottom:12px; padding-bottom:12px; border-bottom:1px solid #1E293B;">
  <a href="https://copyrightoffice.gov.bd/" target="_blank" rel="noopener noreferrer" style="color:#C5A059; font-weight:600; font-size:14px; text-decoration:underline;">Copyright Office Bangladesh &nearr;</a>
  <p style="color:#94A3B8; font-size:12px; margin:4px 0 0 0; line-height:1.4;">Software, Literary, Artistic & Musical Works Copyright Registration</p>
</div>

<div style="margin-bottom:12px; padding-bottom:12px; border-bottom:1px solid #1E293B;">
  <a href="https://www.wipo.int/" target="_blank" rel="noopener noreferrer" style="color:#C5A059; font-weight:600; font-size:14px; text-decoration:underline;">World Intellectual Property Organization (WIPO) &nearr;</a>
  <p style="color:#94A3B8; font-size:12px; margin:4px 0 0 0; line-height:1.4;">International IP Systems, Madrid Protocol & PCT Regulations</p>
</div>