On 6 November 2025, the President of Bangladesh issued the Personal Data Protection Ordinance, 2025 (Ordinance No. 61 of 2025) to establish a legal framework for the ownership and protection of personal data. The Ordinance aims to safeguard fundamental rights, particularly data privacy and security, while encouraging responsible innovation and a digital economy through lawful processing practices. It establishes obligations for data fiduciaries and processors regarding accountability, transparency, and data breach notifications, while granting data subjects specific rights such as access, portability, and the right to withdraw consent. The Ordinance also establishes a four-tier classification system and conditions for data transfers abroad. The Ordinance also introduces administrative fines and criminal penalties for the unauthorised processing of sensitive data, illegal collection of children's data, and fraudulent acquisition of consent.
Original source