LexLint.ioBeta

Know the law your code answers to.

Law / Bangladesh

Cyber Security Act, 2026, AI-generated sexual content and CSAM ban

Cyber Security Act 2026, Act No. 81 of 2026, s.25 (offence and punishment relating to sexual harassment, blackmail, or publication of obscene content)

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: http://bdlaws.minlaw.gov.bd/act-details-1710.html

In force since .

An AI prohibited practices rule binding public and private bodies.

How the hook was established
express
What makes it apply
Place of effect
Obligation class
Prohibition
Audit expectation
none
Setting the rule reaches
General

What it requires

  • Do not send, publish, or broadcast, or threaten to send, publish, or broadcast, an image, video, audio-visual clip, or graphic created or edited by artificial intelligence for the purpose of blackmail, sexual harassment, revenge pornography, digital child-sexual-abuse material, or sextortion, or that was obtained or kept for that purpose; a higher penalty applies where the person targeted is a woman or a child under eighteen.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
NIST AI 600-1
MIT mitigations Draft
  • 1.5Safety Decision Frameworks
  • 3.3Access Management
FINOS AIGF
ETSI EN 304 223
  • 5.1.2-1Business need and security risks written down and assessed before deciding to build an AI system.
  • 5.1.4-5End-users told which uses of the system are prohibited.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.

If you get it wrong

Criminal exposureYes

Criminal exposure note

Up to 2 years' imprisonment, or a fine of up to BDT 1,000,000, or both, on conviction (s.25(2)); up to 5 years' imprisonment, or a fine of up to BDT 2,000,000, or both, where the offence is committed against a woman or a child under eighteen (s.25(3)).

What it makes you log

Logging duty

Section 25 is a criminal prohibition on AI-generated or AI-edited sexual-harassment, blackmail, revenge-pornography, digital-CSAM, or sextortion content, and names no logging, record-keeping, or documentation duty of its own. The Act's data-preservation power (section 36, তথ্য সংরক্ষণ, Data Preservation) lets the Director-General order preservation of data stored in a computer or computer system where an investigation requires it; that is a separate, investigation-triggered power over a third party's already-stored data, in a section this instrument does not cite.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Section 25(1) makes it an offence for any person, through a website or other digital or electronic medium, intentionally or knowingly to send, publish, or broadcast, or threaten to send, publish, or broadcast, any information, video, audio-visual footage, still image, or graphics that is captured, edited, or created or edited by artificial intelligence, and displayable, where it was created for, obtained for, or preserved for the purpose of blackmail, sexual harassment, revenge pornography, digital child-sexual-abuse material, or sextortion, and is harmful or intimidating.

Section 25(2) sets the base penalty at up to two years' imprisonment, or a fine of up to BDT 1,000,000, or both; section 25(3) raises it to up to five years' imprisonment, or a fine of up to BDT 2,000,000, or both, where the victim is a woman or a child under eighteen.

The Act's own commencement clause deems it, including this section, to have come into force on , the date its immediate predecessor, the Cyber Security Ordinance 2025, took effect; that Ordinance had itself replaced the Cyber Security Act, 2023.

When LexLint raises it

When your app profile says your app generates audio with AI, generates images with AI, generates video with AI or publishes adult content.

Back to the example  ·  Lint your app

Page updated .