Cybersecurity and Cybercrime Law in Bangladesh

Organisations with operations, users or data flows involving Bangladesh face a mixed enforcement and regulatory environment for cyber matters. This page provides a high‑level orientation for boards, general counsel and incident responders based in England and Wales considering cross‑border cyber incidents, investigations or regulatory compliance linked to Bangladesh.

Framework and enforcement landscape

Bangladesh’s cyber legal landscape includes criminal and administrative instruments directed at unauthorised access, malicious content and electronic offences, together with sectoral guidance from financial and telecom regulators. Enforcement is carried out by police cyber units and regulatory bodies; investigative practice and timelines will often differ from those in England and Wales.

Cross‑border investigations and evidence preservation

Key practical challenges in cross‑border investigations include evidence preservation, lawful access to data hosted in different jurisdictions and the legal pathways for cooperation with Bangladeshi authorities. Typical options for UK‑based organisations include rapid preservation requests, voluntary cooperation with foreign law enforcement, and formal mutual legal assistance where appropriate. Consideration should be given to local process, data localisation risks and the potential for parallel civil and criminal processes.

Compliance, risk management and contractual protections

Risk management should combine preventative measures (technical controls, logging and monitoring) with contractual and governance steps. For international businesses, that typically means:

mapping data flows and identifying where regulated personal data is processed;
including clear incident response and assistance clauses in third‑party contracts;

reviewing breach notification obligations under relevant regimes and preparing templates for cross‑border notifications;

considering cyber insurance and the insurer’s requirements on notification and forensics.

Practical checklist for when an incident touches Bangladesh

Immediately implement containment and forensic preservation steps; avoid unnecessary data alteration.
Map affected systems and identify data residency and applicable law.
Notify relevant internal stakeholders and external incident response partners (forensics, PR, counsel).
Assess whether local law enforcement engagement is necessary or advantageous; seek local counsel where engaging Bangladeshi authorities.
Preserve evidence in line with chain‑of‑custody principles and consider formal preservation requests where available.
Review contractual obligations with customers, processors and insurers and prepare regulator notification drafts.

Jurisdiction and sources

Primary official sources to consult include:

Government of the People’s Republic of Bangladesh — official gazette and ministry publications (Ministry of Law; Ministry of Posts, Telecommunications and Information Technology)
Bangladesh Police — Cyber Crime Unit
Bangladesh Telecommunication Regulatory Commission (BTRC)
Bangladesh Bank — circulars and guidance for the financial sector
UK sources: Information Commissioner’s Office (ICO), National Cyber Security Centre (NCSC), Computer Misuse Act 1990 and GOV.UK guidance on mutual legal assistance and cross‑border investigations

London office: Holborn Gate, 330 High Holborn, London, WC1V 7QH, England.

General information only; not legal advice and not a substitute for advice on a particular matter.