Thank You!

Join our community for free to access exclusive whitepapers, reports, and regulatory information.

By signing up you agree to OneTrust DataGuidance's Terms and Conditions and Privacy Policy.

Already have an account? Log in

Upgrade to a premium account to save this to your customizable Workspace

Save and organize information most relevant to you Share your research and collaborate with other DataGuidance users Get alerts based on your topics of interest

Already have an account? Log In

08 August 2022

Bangladesh: ICT Department publishes data protection bill 2022

The Department of Information and Communication Technology released, on 16 July 2022, the draft Data Protection Act, 2022. In particular, the draft law applies to the collection, processing, using, and sharing of data, or otherwise processed data, having both territorial and extra-territorial application. Notably, the draft law clarifies it will not apply to the processing of anonymised, encrypted, or pseudonymised data. In regard to data controllers and processors, the draft law outlines data protection principles, legal bases for data processing including consent, as well as specific requirements for sensitive personal information, among other things.

Moreover, the draft law establishes obligations for the cross-border transfer of personal information, including requiring that sensitive, user created or generated, and classified data be stored in Bangladesh. Finally, on the point of data subject rights, the draft law provides the following rights:

right to access;
right to correction;
right to withdraw consent;
right to erasure;
right to prevent processing of data; and
right to data portability.

You can read the draft law here.