Is a lender, in Bangladesh

Cyber Security Act, 2026 (Act No. 81 of 2026), s. 9 · Read the law's page

• Without delay after a cyber incident occurs, inform the National Computer Emergency Response Team the National Cyber Security Agency maintains; the Act names no fixed number of hours or days for this notification.
• This binds a government, private, or autonomous organization or institution in Bangladesh, the Act's own general categories for essentially any actor rather than a licensed or sector-specific status, so an ordinary software distributor or app operator falls within it without needing a critical-infrastructure designation.

Bangladesh Bank, Guidelines on the Licensing, Operation and Regulation of Credit Bureau, Payment Systems Department Circular No. 05/2024, ss. 7, 11, 14 and 18 · Read the law's page

• If you operate a credit bureau in Bangladesh, get a licence from Bangladesh Bank first: no individual or company may operate one without it, and the licensed bureau's name must include the words Credit Bureau.
• Collect, store and process a person's credit information only with the person's consent, and give it only to a user that has a permissible purpose and the person's consent, unless a law enforcement agency, regulator or court order requires the report.
• Keep collected data inside Bangladesh, and do not store it in an internet cloud located outside Bangladesh.
• Give a person free access to a copy of their credit report once a year or when a user has taken an adverse action, and run a dispute process that lets the person correct information that is inaccurate, incomplete or out of date.
• Report to Bangladesh Bank every quarter, give it unrestricted access to the credit information you hold, and appoint an external auditor for a technology and financial audit every year.