BangladeshPersonal Data Protection Act, 2026, children's personal data
Personal Data Protection Act, 2026, Act No. 63 of 2026, s.9
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: http://bdlaws.minlaw.gov.bd/act-details-1692.htmlIn force since .
A sensitive categories rule.
As of .
What it requires
- To collect or process the personal data of a child (a person under 18 or of any age the government sets) or of a person unable to give consent, take the consent of that person's parent, legal guardian or a person empowered to decide for them, in the manner a regulation prescribes.
- Process the personal data of a child or of a person unable to give consent in a way that keeps that person's rights and interests protected and unimpaired.
These lines are LexLint's reading of the law's text, as of .
What this law does
Section 2(19) defines a child as a person under 18 years of age or of an age the government sets. Section 9(1) lets a Data Fiduciary collect or process the personal data of a child, or of a person unable to give consent, on the consent of that person's parent, legal guardian or a person empowered to decide for them, taken in the manner a regulation prescribes.
Section 9(2) requires the processing of such a person's personal data to be carried out with a view to keeping that person's rights and interests protected and unimpaired. Under section 9(3), a consent given for a child by a parent, legal guardian or person empowered to decide stays in force until the child reaches 18 years of age or, for a person unable to consent, until that person gains the capacity to consent.
When LexLint raises it
When your app profile says your app serves under-18s.