Technology, IP & DataPractice areaBangladesh · Cross-border
Cyber Law, Internet &
Digital Regulation
Bangladesh-facing online activity can raise questions across ICT legislation, cyber-law instruments, electronic records and communications-sector interfaces. The applicable position may depend on the activity, the role of the relevant entity or provider, the systems involved, the location of users or infrastructure, and the law or regulator in force at the relevant time. This page provides a bounded, informational starting point for identifying those interfaces; it does not cover incident response, personal-data compliance, intellectual-property issues or media licensing.
FocusTechnology, IP & Data
Page typePractice
information
information
Initial routeStart with
context
context
The starting point
Identify the digital-regulatory
question
A useful starting point is to establish what is changing, who is carrying out the activity, and which Bangladesh connection is present. The next question is whether the facts point to an ICT or cyber-law issue, a communications-sector interface, or a separate specialist review. A cyber-law label alone does not determine the answer, and the current legal text, commencement and relevant official materials may need checking at the decision date.
Classify the activity
Identify the proposed online activity or feature, the relevant entity and role, the users, systems or infrastructure involved, and the Bangladesh-facing connection. Beginning with those facts can help avoid assuming that a general digital-regulation label supplies the answer.Test the regulatory interface
Consider whether the activity may raise an ICT or cyber-law question, a provider-role or communications-sector question, or a separate issue outside this page’s scope. Provider licensing, personal-data questions, incident response, intellectual property and media licensing require distinct treatment.Preserve the decision trail
Identify the electronic records, approvals, signature method, retention questions and official-source checks relevant to the particular step. The ICT Act is a starting point for some electronic-record questions; the document, process and any later rules should be considered individually.A focused conversation
Digital-regulatory interfaces to
consider
The following issue areas are limited to Bangladesh-facing online activity, ICT and cyber-law interfaces, and internet-facing operations. They are framed as decision topics rather than statements of a universal legal requirement, and they do not extend to neighbouring specialist scopes.
01 · Potential question
Digital-regulatory exposure mapping
A planned activity, feature, communication or market step may be mapped against the Bangladesh ICT, cyber-law and online-regulatory touchpoints that the facts suggest should be checked.02 · Potential question
Current instrument and change review
Relevant Acts, amendments, regulator guidance, consultations, notices and directions may need to be identified and their status verified as of the decision date. A public list or historic document is not, by itself, a complete statement of the applicable position.03 · Potential question
Electronic records and signatures
A proposed electronic process can raise questions about legal recognition, authentication, accessibility and retention. Electronic execution or storage should not be assumed to be sufficient for every document, transaction or process.04 · Potential question
Online activity and platform interface triage
A website, application, online communication or platform feature may call for digital-regulatory issue spotting. This topic is confined to that threshold question and excludes privacy, content-rights and media-licensing analysis.05 · Potential question
Provider-role and communications-sector issue spotting
The operating model may indicate a need for a separate BTRC or telecommunications-law review where a provider role is in view. This page does not address telecommunications licensing applications, spectrum, network regulation or related procedures.06 · Potential question
Published rulemaking and regulator material
A published consultation, guideline, notice or other official material may be examined for its stated status, scope and relevance to a proposed decision. A consultation or draft is not treated as operative law unless adoption and applicability are separately verified.07 · Potential question
Bangladesh and cross-border interface mapping
Where online activity has Bangladesh and foreign elements, connection facts such as entities, users, systems, infrastructure and enforcement links may need to be identified. Foreign-law questions may require separate review by appropriately qualified local counsel.Bangladesh context
Public context for a
dated assessment
The public materials below are limited context signals, not a consolidated statement of current law. They show why the source version, legal status, commencement, later instruments and facts should be checked before relying on a proposition about a particular activity.
Public-record signal: 2026 cyber-law change listings
The Legislative Division’s public list identifies the Cyber Security Act 2026 as Act No. 81 dated 10 April 2026 and identifies a later Cyber Security (Amendment) Act 2026 as Act No. 99 dated 1 July 2026. The listing is a dated change signal, not a consolidated interpretation of legal effect; the current text, commencement, later instruments and source version should be verified. This public context does not imply TRW involvement, representation, advice, endorsement, or results.Read sourcePublic-record signal: official cyber-law index
The National Cyber Security Agency’s public laws page lists the 2026 Act alongside 2025 cyber instruments and earlier cyber and ICT materials. An official index may be useful for locating public records, but it is not necessarily a consolidated statement of legal effect; its listing information should be reconciled with Legislative Division and Gazette materials. This public context does not imply TRW involvement, representation, advice, endorsement, or results.Read sourcePublic-record signal: ISP guidance anticipates change
BTRC’s available ISP guideline is dated 15 December 2020 and states that it should be read with later laws, policies, rules, orders and directives; it also anticipates revision or update. It can assist with a narrow provider-role question, but it is not a complete current rulebook and does not establish that an ordinary website or application requires a licence. This public context does not imply TRW involvement, representation, advice, endorsement, or results.Read sourceQuestions, not prescriptions
What may
matter.
These answers are general information. The applicable route always depends on the facts, documents and current legal position.
What is the current public status of Bangladesh’s Cyber Security Act 2026?
The Legislative Division’s public list identifies the Cyber Security Act 2026 as Act No. 81, dated 10 April 2026, and identifies a Cyber Security (Amendment) Act 2026 as Act No. 99, dated 1 July 2026. Those entries are public change records, not a consolidated current text. Before reliance, the enacted and consolidated text, commencement, later amendments, subordinate instruments and applicability to the facts should be verified.
What does Bangladesh’s ICT Act say about electronic records and electronic signatures?
The Information and Communication Technology Act 2006 contains definitions and legal-recognition provisions concerning electronic records and electronic signatures, as well as provisions that address authentication and retention. Their application may depend on accessibility, prescribed processes, amendments, exclusions, interaction with other law and the document or transaction in question. The Act does not mean that every record, signature or retention method is electronically valid in every context.
When is an internet-service provider question different from an ordinary online-business question?
BTRC’s available ISP guideline addresses the building, maintenance and operation of ISP systems and services. It may therefore point to a provider-status review when the operating model involves those functions. It should not be used to conclude that every website, application or online business needs a BTRC licence; the current framework and the actual role would need separate verification.
Begin with context
Frame a Bangladesh-facing digital-regulatory
question
Use the contact route to share non-confidential context only: a high-level outline of the online activity or proposed change, the relevant jurisdictions and the decision to be considered. Please do not send confidential, privileged, personal or time-sensitive information through an initial website enquiry.
Legal information only. This page provides general, conditional information about Bangladesh-facing cyber law, internet regulation and digital-regulatory interfaces as of its publication date. It is not legal advice and is not a substitute for an assessment of a specific situation. It does not address every potentially relevant Act, amendment, rule, regulator direction, official notice, factual circumstance or jurisdiction. Laws and regulatory materials may change, and their application can depend on the activity, role, systems, location, documents and timing involved. This page is limited to issue framing; it does not cover cybersecurity incident response, personal-data compliance, intellectual-property protection or enforcement, media licensing, telecommunications licensing, financial-services regulation, digital assets, artificial intelligence governance or technology transactions. A foreign-law issue may require separate input from appropriately qualified local counsel. Initial website enquiries should contain non-confidential information only and must not include privileged, confidential, personal or time-sensitive information. Sending an enquiry does not by itself create a professional relationship, and no step should be taken or deferred solely on the basis of this page.
Publication candidate prepared solely from the supplied Batch 04 research pack and source log. It requires Bangladesh-law legal review, editorial scope review, a publication-date check of the live official sources and consolidated legislation, and re-verification of the listed internal routes before release.
Selected source material
- Laws of Bangladesh — Cyber Security Act 2026
- Laws of Bangladesh — Information and Communication Technology Act 2006
- Legislative and Parliamentary Affairs Division — Laws enacted in 2026
- National Cyber Security Agency — Laws and Rules
- Bangladesh Telecommunication Regulatory Commission — Regulatory and Licensing Guidelines for Internet Service Provider in Bangladesh