This note provides a descriptive overview of the principal instruments and enforcement dynamics that govern cyber activity in Bangladesh and highlights practical considerations for organisations based in England and Wales and elsewhere that engage with Bangladeshi individuals, customers, platforms or infrastructure. Our London office is at Holborn Gate, 330 High Holborn, London, WC1V 7QH, England.

Framework and key offences

Bangladesh’s cyber legal landscape has evolved from the Information and Communication Technology (ICT) Act of 2006 to more recent statutes and rules addressing online content, data misuse and cybersecurity. Key themes that recur across the statutory framework are prohibitions on unauthorised access and modification, interception of communications, identity-related offences, and a range of content‑related offences that can attract criminal penalties.

Several provisions create liability for hosting or publishing content deemed unlawful in Bangladesh, and penalties vary from fines to imprisonment depending on the offence. Separate regulatory instruments administered by telecommunications and information technology authorities address network security, interception and licensing.

Enforcement, process and practical impact

Enforcement is driven by investigative and prosecutorial bodies within Bangladesh. Practical consequences for foreign entities can include takedown orders, blocking of services, criminal investigation of local representatives or staff, and preservation or disclosure demands directed at local intermediaries and hosting providers. Cross‑border cooperation through mutual legal assistance and preservation requests may be available, but timelines and scope differ from UK procedures.

From an England and Wales perspective, striking the right balance between compliance with local Bangladeshi requirements and obligations under UK law (including data protection and content‑related statutory duties) requires careful assessment of legal risks, technical controls and commercial arrangements.

Practical checklist for UK and international actors

• Map where data of Bangladeshi residents is collected, stored and processed and identify relevant controllers/processors.
• Review terms with local partners and hosting providers for jurisdiction, data‑transfer mechanisms and process for handling official notices.
• Clarify notification and preservation procedures for suspected incidents affecting Bangladeshi users, including internal escalation paths.
• Establish content moderation and takedown workflow that records requests, decisions and communications from local authorities.
• Maintain incident response playbooks that include evidence preservation, legal hold and criteria for engaging local counsel or law enforcement.
• Consider contractual protections for personnel and local representatives who may be exposed to enforcement action.

Jurisdiction and sources

Primary sources and official institutions for further reference include:

• Parliament of Bangladesh (legislation and gazette)
• Ministry of Posts, Telecommunications and Information Technology, Government of Bangladesh
• Bangladesh Telecommunication Regulatory Commission (BTRC)
• Bangladesh Computer Council and associated national CERT
• Bangladesh Police (cyber crime investigation units)
• For comparative UK material: Information Commissioner’s Office (ICO) and UK National Cyber Security Centre (NCSC)

Readers should consult primary legislation and official guidance in the relevant jurisdiction for authoritative detail and should consider local legal advice in Bangladesh where specific risk or enforcement issues arise.

General information only; not legal advice and not a substitute for advice on a particular matter.