Cyber Security Act, 2026, AI-generated sexual content and CSAM ban
Cyber Security Act 2026, Act No. 81 of 2026, s.25 (offence and punishment relating to sexual harassment, blackmail, or publication of obscene content)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 21 May 2025.
An AI prohibited practices rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not send, publish, or broadcast, or threaten to send, publish, or broadcast, an image, video, audio-visual clip, or graphic created or edited by artificial intelligence for the purpose of blackmail, sexual harassment, revenge pornography, digital child-sexual-abuse material, or sextortion, or that was obtained or kept for that purpose; a higher penalty applies where the person targeted is a woman or a child under eighteen.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Up to 2 years' imprisonment, or a fine of up to BDT 1,000,000, or both, on conviction (s.25(2)); up to 5 years' imprisonment, or a fine of up to BDT 2,000,000, or both, where the offence is committed against a woman or a child under eighteen (s.25(3)).
What it reaches
How the hook was established
express
What makes it apply
Place of effect
Obligation class
Prohibition
What it makes you log
Logging duty
Section 25 is a criminal prohibition on AI-generated or AI-edited sexual-harassment, blackmail, revenge-pornography, digital-CSAM, or sextortion content, and names no logging, record-keeping, or documentation duty of its own. The Act's data-preservation power (section 36, তথ্য সংরক্ষণ, Data Preservation) lets the Director-General order preservation of data stored in a computer or computer system where an investigation requires it; that is a separate, investigation-triggered power over a third party's already-stored data, in a section this instrument does not cite.
- Kind
- None
- As of
- 22 September 2026
Who checks it
Audit expectation
none
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Section 25(1) makes it an offence for any person, through a website or other digital or electronic medium, intentionally or knowingly to send, publish, or broadcast, or threaten to send, publish, or broadcast, any information, video, audio-visual footage, still image, or graphics that is captured, edited, or created or edited by artificial intelligence, and displayable, where it was created for, obtained for, or preserved for the purpose of blackmail, sexual harassment, revenge pornography, digital child-sexual-abuse material, or sextortion, and is harmful or intimidating.
Section 25(2) sets the base penalty at up to two years' imprisonment, or a fine of up to BDT 1,000,000, or both; section 25(3) raises it to up to five years' imprisonment, or a fine of up to BDT 2,000,000, or both, where the victim is a woman or a child under eighteen.
The Act's own commencement clause deems it, including this section, to have come into force on 21 May 2025, the date its immediate predecessor, the Cyber Security Ordinance 2025, took effect; that Ordinance had itself replaced the Cyber Security Act, 2023.
When LexLint raises it
generates_content
Read the law
official statute text, Bangladesh Laws (bdlaws.minlaw.gov.bd)
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived September 6, 2026. Publisher's page: http://bdlaws.minlaw.gov.bd/act-details-1710.htmlEvery line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.