Duty LXD-1650
Makes high-risk automated decisions, in Bangladesh
Cyber Security Act, Computer Emergency Response Team, Duty to Report a Cyber Incidentsince 1 line
Cyber Security Act, 2026 (Act No. 81 of 2026), s. 9 · Read the law's page
- Without delay after a cyber incident occurs, inform the National Computer Emergency Response Team the National Cyber Security Agency maintains; the Act names no fixed number of hours or days for this notification.
- This binds a government, private, or autonomous organization or institution in Bangladesh, the Act's own general categories for essentially any actor rather than a licensed or sector-specific status, so an ordinary software distributor or app operator falls within it without needing a critical-infrastructure designation.
Personal Data Protection Act, 2026, data principal rights of access, correction, withdrawal and erasuresince 4 lines
Personal Data Protection Act, 2026, Act No. 63 of 2026, ss.10-14 · Read the law's page
- An app that collects or processes the personal data of an individual in Bangladesh must let that individual apply in writing to exercise the rights of this chapter, and may not cancel or depart from those rights by contract or notice.
- On the data principal's request, give the data principal a copy of the personal data collected and processed, in a concise and intelligible format, with the identity of the others it was shared with.
- On request, correct inaccurate or misleading personal data and complete or update incomplete or stale data, or give the data principal written reasons for refusing, and tell the data principal of a change made within 30 days.
- Let the data principal withdraw consent to storage, processing or automated decisions at any time, and on request erase all of that person's personal data held where one of the grounds in section 13(2) is met, the way a regulation prescribes.