Bangladesh. Cybersecurity. Ordinance / Act

CSO 2025Cyber Security Ordinance, 2025 (Ordinance No. 25 of 2025), as continued and amended by Parliament 2026

In force
Partly verifiedLow confidence. Exact promulgation date (approx. 21 May 2025) and final Act number not confirmed; incident-reporting duties not verified.

§1Summary

Synopsis

Replaces the controversial Cyber Security Act 2023, dropping several speech-related offences and establishing a National Cyber Security Agency. It governs cyber incidents, critical information infrastructure and cyber offences, and recognises internet access as a civic right.

Key themes
  • cybersecurity
  • critical information infrastructure
  • cyber offences
  • National Cyber Security Agency
Unique features

Repealed speech offences (e.g. former ss21, 24-29, 31, 34) of the 2023 Act.

SaaS relevance

Relevant to SaaS designated as critical information infrastructure or served with investigative/blocking orders in Bangladesh.

§2Obligations

DPO
No

§3Dates

Key dates
  • Adopted
  • In force
  • Promulgated May 2025 repealing Cyber Security Act 2023; accepted by Parliament for enactment April 2026; Cyber Security (Amendment) Bill 2026 passed ~June 2026 removing s20 (online gambling).

§4Text and authority

Text
Authority
National Cyber Security Agency

§5Where it applies

Domestic law of
Bangladesh

§6Sources and verification

Verification

Low confidence.

Partly verifiedLow confidence. Exact promulgation date (approx. 21 May 2025) and final Act number not confirmed; incident-reporting duties not verified.