Bangladesh · Reviewed September 2026

What Is Personal Data Protection Act, 2026 (Act No. 63)?

The Legislative and Parliamentary Affairs Division lists the Personal Data Protection Ordinance, 2025 as Ordinance No. 61, dated 6 November 2025, and its 2026 ordinance index separately lists a Personal Data Protection (Amendment) Ordinance, 2026 as Ordinance No. 23, dated 5 February 2026. Bangladesh Government Press records that Personal Data Protection Act No. 63 of 2026 was published on 10 April 2026. The official Act gazette is in Bangla and could not be independently reviewed here, so the current Act's commencement details, transitional provisions, rights and exceptions, statutory deadlines, penalties, regulator procedure, and any translation-alignment questions remain explicitly unresolved rather than inferred from an older English draft or a secondary summary.

Written byRahul Kandoriya·Founder, OfflistMe·Last updated September 7, 2026

Key takeaways

Act No. 63 of 2026 (Personal Data Protection Act, 2026 (Act No. 63)) is the primary consumer privacy law for Bangladesh, enacted in 2026 and last substantively updated in Personal Data Protection Act No. 63 of 2026 was published 10 April 2026; its relationship to the 2025 and 2026 Personal Data Protection Ordinances and its commencement remain unresolved because no authentic English text of the current Act was located.
Supervisory authority: ICT Division, Ministry of Posts, Telecommunications and Information Technology. Private right of action: Limited.
Statutory citation: Personal Data Protection Act No. 63 of 2026, published 10 April 2026; its relationship to the 2025 and 2026 Personal Data Protection Ordinances remains to be confirmed from the controlling text.
Act No. 63 of 2026 may be relevant when you contact a data broker. OfflistMe can help draft a request for you to review and send; it does not decide legal applicability, provide legal advice, or guarantee a broker's response.

At a glance

Full name: Personal Data Protection Act, 2026 (Act No. 63)
Short code: Act No. 63 of 2026
Jurisdiction: Bangladesh
Enacted: 2026
Last major update: Personal Data Protection Act No. 63 of 2026 was published 10 April 2026; its relationship to the 2025 and 2026 Personal Data Protection Ordinances and its commencement remain unresolved because no authentic English text of the current Act was located
Regulator: ICT Division, Ministry of Posts, Telecommunications and Information Technology
Private right of action: Limited
Statutory citation: Personal Data Protection Act No. 63 of 2026, published 10 April 2026; its relationship to the 2025 and 2026 Personal Data Protection Ordinances remains to be confirmed from the controlling text

Scope, who Act No. 63 of 2026 covers

Not yet fully mapped from the controlling Bangla text of the current 2026 Act; a future review should confirm its territorial and personal scope directly from the gazetted text rather than an unofficial translation.

Protected data

Not yet fully mapped from the controlling Bangla text of the current 2026 Act.

Data subject rights

Not yet fully mapped from the controlling Bangla text of the current 2026 Act — rights, exceptions, and their statutory deadlines require direct confirmation from the gazetted Act before being presented as settled law

Notable features

Bangladesh moved from a long-running draft-bill process to an enacted Ordinance in late 2025, followed by a listed amendment ordinance and then Personal Data Protection Act No. 63 of 2026. The current Act's authentic English text was not located, so any detailed description must be re-verified against the controlling Bangla gazette text rather than an earlier English draft.

Enforcement & penalties

Regulator: ICT Division, Ministry of Posts, Telecommunications and Information Technology

Penalties: Not yet fully mapped from the controlling Bangla text of the current 2026 Act.

Private right of action: Not yet fully mapped from the controlling Bangla text of the current 2026 Act; no enforcement procedure, complaint route, or private right of action has been independently confirmed in the 7 September 2026 review.

Relevance to data brokers

Not yet reviewed. No jurisdiction-specific data-broker or public-record route has been confirmed either way; this and every other route-specific claim require a dedicated review of the current Act's Bangla text before publication.

Generate requests in under 60 seconds

Generate removal requests for 1,034 US/global profiles, $9

OfflistMe helps draft opt-out requests using the details you choose. Review the provider route and legal basis, then send from your own inbox. The tool is not legal advice and does not guarantee a broker's response.

Generate My Opt-Out Requests

FREE

FAQ

Does Bangladesh have a data protection law?+

The official Government Press records Personal Data Protection Act No. 63 of 2026 as published on 10 April 2026. Its relationship to the 2025 Ordinance and listed 2026 amendment ordinance was not independently confirmed from the controlling Bangla text, so specific rights, deadlines, and enforcement details are not yet confirmed.

Is this page a complete guide to Bangladesh's data-protection rights?+

Not yet. This page records the 2025 and 2026 Ordinances and the current Act's official publication, but not a full rights, exceptions, deadline, and penalty review directly from the gazetted Bangla text.

Official sources & citations

Other international privacy regimes

Act No. 63 of 2026 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows:

Related concepts & guides

Privacy research hubBrowse every law explainer and source ledger Data removal by countryBrowse jurisdiction-specific removal guides US Privacy Laws MatrixAll US state laws compared What is GDPR?EU framework What is CCPA?California baseline What is a data broker?Full explainer Privacy glossaryTerms defined What is GPC?Browser opt-out signal What is FCRA?US consumer reporting law What is FTC Act §5?US privacy enforcement Check broker exposureSee which brokers may have your info One-time data removalPay once, no subscription needed Start for $9Prepare reviewable removal requests