Bangladesh Government Working On Legal Framework For New Cyber Security Act: PM Adviser Zahed Ur Rahman

🕸 Social and political awareness, alongside legal measures, is essential to prevent the spread of misinformation, said Prime Minister''s Information and Broadcasting Adviser Dr Zahed Ur Rahman on Tuesday. The adviser''s remarks signal a more nuanced approach to addressing Bangladesh''s growing challenges with misinformation, online rumours, and cyber threats — one that recognises the limitations of purely legal responses while still committing to strengthening the country''s cyber security legal framework.

📊 The announcement that the government is working on a legal framework for a new Cyber Security Act comes after Bangladesh''s previous cyber security legislation — the Digital Security Act (DSA) — was widely criticised for being used to suppress journalism and political dissent. The new framework is expected to take a more balanced approach — strengthening protections against genuine cyber threats while safeguarding freedom of expression and journalistic work.

🏛 Why cyber security legislation matters for Bangladesh

Cyber security legislation matters for Bangladesh for several reasons. First, the country''s rapid digitalisation has created new vulnerabilities that need to be addressed through legal frameworks. Bangladesh has tens of millions of internet users, a growing e-commerce sector, a thriving fintech ecosystem, and increasing government services delivered through digital platforms. All of these create opportunities for cybercrime — including identity theft, financial fraud, data breaches, and online scams — that need to be addressed through effective legal frameworks.

Second, misinformation and disinformation spread through social media and messaging apps have emerged as significant threats to social cohesion, public order and democratic processes. Bangladesh has experienced several incidents where false rumours spread through social media led to communal violence, mob attacks, or public panic. Effective legal frameworks are needed to address these threats while protecting legitimate free expression.

Third, Bangladesh''s critical infrastructure — including banking systems, power grids, telecommunications networks, and government databases — is increasingly connected to the internet and therefore vulnerable to cyber attacks. The 2016 Bangladesh Bank heist, in which hackers attempted to steal $951 million from the central bank''s account at the Federal Reserve Bank of New York, demonstrated the scale of the cyber threat facing Bangladesh''s financial system. Stronger cyber security legislation is needed to protect critical infrastructure from such attacks.

👥 Balancing security and freedom

The adviser''s recognition that "social and political awareness, alongside legal measures, is essential" is significant because it suggests a more balanced approach than the previous Digital Security Act. The DSA was criticised by international human rights organisations, journalists, and civil society groups for being overly broad and for being used to silence critics of the government. Several high-profile cases under the DSA — including arrests of journalists, activists, and ordinary citizens for social media posts — drew international criticism and damaged Bangladesh''s reputation on press freedom.

The new Cyber Security Act is expected to address these concerns by: clearly defining cyber crimes with specific elements and penalties; requiring higher thresholds for prosecution; providing stronger protections for journalists and whistleblowers; and establishing oversight mechanisms to prevent misuse of the law. The adviser''s emphasis on social and political awareness alongside legal measures suggests that the government also recognises the importance of public education, media literacy, and self-regulation in addressing misinformation — not just punitive legal measures.

🌏 International best practice

Bangladesh can draw on international best practice in designing its new Cyber Security Act. Several countries have developed cyber security legislation that balances security concerns with human rights protections:

• ✅ European Union''s General Data Protection Regulation (GDPR): Establishes strict rules for data protection and privacy, with significant penalties for violations.
• ✅ Estonia''s Cyber Security Act: Provides a comprehensive framework for protecting critical information infrastructure, with requirements for risk assessment, incident reporting, and security measures.
• ✅ Singapore''s Cybersecurity Act: Establishes a framework for the protection of critical information infrastructure, with requirements for incident reporting and risk management.
• ✅ United Kingdom''s Online Safety Act: Places duties of care on online platforms to protect users from harmful content, with regulatory oversight by Ofcom.

Bangladesh''s new Cyber Security Act can draw on these models to develop a framework that is tailored to the country''s specific needs and challenges — while aligning with international standards on human rights, freedom of expression, and due process.

💰 Implications for Bangladesh''s digital economy

The new Cyber Security Act has significant implications for Bangladesh''s digital economy. A clear, predictable and balanced legal framework would support the growth of the country''s digital economy by providing businesses with regulatory certainty, protecting consumers from cybercrime, and building trust in digital services. This is particularly important for the fintech sector, e-commerce platforms, and digital government services — all of which depend on consumer trust to grow.

For Bangladesh''s broader digital transformation agenda, the new Act is also strategically important. The government has been pushing for a "Digital Bangladesh" for over a decade, and the next phase of digital transformation — including AI adoption, smart city development, and digital public infrastructure — will require a robust cyber security legal framework to succeed. Without such a framework, the country''s digital ambitions could be undermined by cybercrime, data breaches, and erosion of public trust in digital services.

🤝 Looking ahead

The coming months will be critical for the development of Bangladesh''s new Cyber Security Act. The government will need to draft the legislation, consult with stakeholders (including civil society, journalists, technology companies and the legal community), and ensure that the final law balances security concerns with human rights protections. The adviser''s emphasis on social and political awareness alongside legal measures is a positive signal — suggesting a more nuanced approach than the previous Digital Security Act. If the new Act can achieve this balance, it will support Bangladesh''s digital transformation while protecting the rights and freedoms that are essential to a healthy digital society.