Interim Government Amends Cyber Security Law, Nullifies Digital Security Act Cases
The interim government has approved a proposal to amend the 'Cyber Security Ordinance 2025', nullifying cases and convictions under eight sections of the repealed 'Digital Security Act 2018'. The move aims to align with global technological developments and improve citizen services.
The amended ordinance recognises personal data as individual property, requiring lawful processing based on consent. Data collectors must inform individuals about the purpose, retention period, transfer, and withdrawal process before obtaining consent. Penalties for data rights violations can reach up to Tk 25 lakh.
The government will classify personal data into four categories: public/open, internal, confidential, and restricted data. All cases, convictions, and investigations under the specified sections of the Digital Security Act will be cancelled following the amendment.
The advisory council also approved the draft of the 'Personal Data Protection Ordinance 2025', setting international standards for data collection, processing, storage, transfer, disclosure, and destruction. This draft aims to ensure privacy, integrity, and security in personal data processing.
The amendment to the Cyber Security Ordinance 2025 and the approval of the Personal Data Protection Ordinance 2025 reflect the government's commitment to strengthening data protection and privacy. No further legal actions will be pursued under the nullified sections of the Digital Security Act 2018.
