Bangladesh: Information and Communication Technology Division closes consultation on Personal Data Protection Act, 2025, including data protection regulation

On 28 January 2025, the Information and Communication Technology Division closed a consultation on the Personal Data Protection Act including data protection regulations. The Act mandates lawful, fair, and transparent processing of personal data, emphasizing principles such as purpose limitation, data minimisation, accuracy, storage limitation, and security. The Act mandates consent for data processing, except in cases involving government functions, legal compliance, and specific personal or family matters. Data subjects are granted rights, including access, correction, erasure, and the ability to object to data processing, along with data portability and the right to restrict processing under certain conditions.