South Asia

Bangladesh

বাংলাদেশ

Last updated:

CyberInsight Asia assessment Seed score

Risk score
~65
Country risk level
Medium-high
U.S. coercion and market-exclusion risk
Low
Maturity
42CMM level: Level 3 Defined · Developing
Composite risk index
1.55High-risk gap
Quadrant
Nurture
Last verified

Scores and risk labels are our own assessment, based on public sources as of the date shown. They are opinions, not findings or statements of fact about any government, organisation or group.

Scores start from a seeded CyberInsight assessment and move as new evidence is recorded. A dimension with no new evidence keeps its last valid contribution.

These dimensions have no evidence yet and are held unchanged: Critical-infrastructure exposure, Regulatory enforcement capability (inverse), Enterprise practice, Geopolitics and great-power risk, Historical incident severity, International cooperation, Laws and regulations, Regulatory capability, Strategy, Threat activity

automated calibration: not run · See the Methodology page for how scores are produced

Trend

A trend needs at least two monthly points; there is only one so far.

Automated coverage

Limited automated coverage

  • Automated coverage is limited: some official sources cannot currently be read, so the content below may be incomplete.
  • Last run (2026-10-12): 4 of 7 tier-1 sources readable.
  • Register areas only partly verified: personal data, critical infrastructure, cross-border data, cybercrime, telecom sector rules, regulator
  • Register areas not yet verified: incident reporting, telecom security, finance sector rules

This means some official sources cannot currently be read automatically, so this page may be incomplete. It does not mean the related laws or events do not exist.

Threat landscape

Threat items are not yet attributed to this jurisdiction.

Industry focus

Industry focus will be generated once sourced material exists.

Compliance points

cybersecurity

Verification state: Verified

  • Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name)
    Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name) (সাইবার সুরক্ষা আইন, ২০২৬ (২০২৬ সনের ৮১ নং আইন)): in force, As of 2026-10-12 · Source (opens in a new window)

personal data

Verification state: Partly verified

  • Personal Data Protection Act, 2026 (Act No. 63 of 2026) (unofficial English translation of the name)
    Personal Data Protection Act, 2026 (Act No. 63 of 2026) (unofficial English translation of the name) (ব্যক্তিগত উপাত্ত সুরক্ষা আইন, ২০২৬ (২০২৬ সনের ৬৩ নং আইন)): partly in force, As of 2026-10-12 · Source (opens in a new window)

critical infrastructure

Verification state: Partly verified

  • Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name)
    Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name) (সাইবার সুরক্ষা আইন, ২০২৬ (২০২৬ সনের ৮১ নং আইন)): in force, As of 2026-10-12 · Source (opens in a new window)

cross-border data

Verification state: Partly verified

  • Personal Data Protection Act, 2026 (Act No. 63 of 2026) (unofficial English translation of the name)
    Personal Data Protection Act, 2026 (Act No. 63 of 2026) (unofficial English translation of the name) (ব্যক্তিগত উপাত্ত সুরক্ষা আইন, ২০২৬ (২০২৬ সনের ৬৩ নং আইন)): partly in force, As of 2026-10-12 · Source (opens in a new window)

cybercrime

Verification state: Partly verified

  • Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name)
    Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name) (সাইবার সুরক্ষা আইন, ২০২৬ (২০২৬ সনের ৮১ নং আইন)): in force, As of 2026-10-12 · Source (opens in a new window)
  • Information and Communication Technology Act, 2006 (Act No. 39 of 2006) (unofficial English translation of the name)
    Information and Communication Technology Act, 2006 (Act No. 39 of 2006) (unofficial English translation of the name) (তথ্য ও যোগাযোগ প্রযুক্তি আইন, ২০০৬ (২০০৬ সনের ৩৯ নং আইন)): in force, As of 2026-10-12 · Source (opens in a new window)

telecom sector rules

Verification state: Partly verified

  • Bangladesh Telecommunication Act, 2001 (Act No. 18 of 2001) (unofficial English translation of the name)
    Bangladesh Telecommunication Act, 2001 (Act No. 18 of 2001) (unofficial English translation of the name) (বাংলাদেশ টেলিযোগাযোগ আইন, ২০০১ (২০০১ সনের ১৮ নং আইন)): in force, As of 2026-10-12 · Source (opens in a new window)

regulator

Verification state: Partly verified

No record can be shown from the Law Register yet.

Notes for ICT equipment suppliers

This section is based on publicly available sources only.

Suggested checks

  • cybersecurity

    Check what Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name) requires of ICT equipment suppliers and operators.

    Source (opens in a new window)
  • critical infrastructure

    Check what Cyber Protection Act, 2026 (Act No. 81 of 2026) (unofficial English translation of the name) requires of ICT equipment suppliers and operators.

    Source (opens in a new window)
  • cross-border data

    Check what Personal Data Protection Act, 2026 (Act No. 63 of 2026) (unofficial English translation of the name) requires of ICT equipment suppliers and operators.

    Source (opens in a new window)

Latest updates

No recent updates yet.