Trust Center

Legal & Compliance

A source-linked index of the Bangladeshi instruments that govern cyber security and personal data, with each instrument's own standing shown plainly.

Informational — not legal advice

This page is an informational index of official Bangladeshi sources. It is not legal advice, not a certified copy, and not a statement that BD AI or OMS IT is compliant with, licensed under, or approved by any of these instruments or authorities. Always read the official text at the linked government source before acting on it.

Registry last verified against the official sources on .

Current instruments

The Cyber Security Act, 2026 is the operative cyber security statute. Earlier acts and ordinances in the same sequence are listed further down as legislative history.

  • Cyber Security Act, 2026

    সাইবার সুরক্ষা আইন, ২০২৬

    In force

    The current primary cyber security statute. It repeals the Cyber Security Ordinance, 2025, which had itself replaced the 2023 Act. Treat this — not the 2023 Act — as the operative cyber security law.

    Citation:
    Act No. 81 of 2026
    Published:
    16 April 2026
    Publisher:
    National Cyber Security Agency (NCSA), Bangladesh
    Last verified:
    26 August 2026
    Official source
  • Personal Data Protection Ordinance, 2025

    In force

    Bangladesh's dedicated personal data protection instrument, listed by the NCSA among its current legal instruments. It is the reference point for personal-data handling obligations.

    Check before relying: Commencement dates and subordinate rules can lag the ordinance itself. Confirm the applicable provisions and any rules at the official source before relying on them.

    Published:
    Not confirmed
    Publisher:
    National Cyber Security Agency (NCSA), Bangladesh
    Last verified:
    26 August 2026
    Official source
  • Cyber Security (Amendment) Ordinance, 2025

    Amending instrument

    An amending instrument in the 2025 cyber security sequence. It modifies rather than replaces the instrument it amends, so it must be read together with the operative text.

    Published:
    Not confirmed
    Publisher:
    National Cyber Security Agency (NCSA), Bangladesh
    Last verified:
    26 August 2026
    Official source

Legislative history

These instruments are no longer the current law. They are kept visible so the record is complete and so conduct from the period they covered can be placed correctly.

  • Cyber Security Ordinance, 2025

    সাইবার সুরক্ষা অধ্যাদেশ, ২০২৫

    Ordinance No. 25 of 2025 — 21 May 2025

    Repealed — historical

    Repealed by the Cyber Security Act, 2026 (Act No. 81 of 2026). Retained here for continuity and for conduct that occurred while it was in force.

    Official source
  • Cyber Security Act, 2023

    সাইবার নিরাপত্তা আইন, ২০২৩

    Repealed — historical

    Historical. Superseded by the 2025 ordinance sequence and then by the Cyber Security Act, 2026. It is listed only as legislative history and must not be cited as the current law.

    Official source

Regulators and official sources

Listing a regulator or an official source is a reference, not an endorsement. BD AI holds no licence, registration, approval, accreditation or partnership from any authority listed here unless a verified record exists in the Trust Center. Absence of a verified record means no such relationship exists.

  • NCSA

    National Cyber Security Agency

    National cyber security law, incident response, and critical information infrastructure policy.

    BD AI's standing: Reference source for cyber security legislation. No licence, approval or supervisory relationship with BD AI.

  • BTRC

    Bangladesh Telecommunication Regulatory Commission

    Telecommunication regulation in Bangladesh, including licensing, registration and enlistment of telecommunication and related service categories, administered through LIMS.

    BD AI's standing: BD AI is NOT BTRC licensed, registered, enlisted or approved. BD AI is an information, help-desk and training platform and does not currently operate a service category that it has established requires a BTRC licence. If a BTRC licence or registration is ever obtained, the certificate will be published as a verifiable record in the Trust Center before any claim is made here.

  • ICT Division

    Information and Communication Technology Division

    National ICT policy, digital government programmes and the national AI policy process.

    BD AI's standing: Reference source for ICT and AI policy. No contract, partnership or endorsement.

  • bdlaws

    Laws of Bangladesh (Legislative and Parliamentary Affairs Division)

    Official consolidated text of Bangladeshi Acts and Ordinances.

    BD AI's standing: Reference source for statutory text. No relationship with BD AI.

  • AI Policy portal

    AI Policy for Bangladesh (national policy portal)

    Publication and public consultation for the national AI policy.

    BD AI's standing: Reference source for AI policy. BD AI has no advisory or official role in the policy process.

AI policy in Bangladesh is in development rather than enacted — it is tracked separately on AI Governance. For how BD AI itself handles data, answers and verification, see Privacy, Security and the Trust Center.