Key Facts
Overview
Bangladesh's PDPO 2025 is the country's first comprehensive data protection framework. Every citizen is recognized as the rightful owner of their personal data. The ordinance explicitly prohibits profiling, behavioral tracking, and targeted advertising directed at minors — a progressive provision for the region.
What This Means for Your Website
- Explicit consent is mandatory before collection, storage, transfer, or use of personal data
- Citizens are recognized as the rightful owners of their personal data
- Profiling, behavioral tracking, and targeted advertising directed at minors is prohibited
- Sensitive data requires heightened safeguards
- Some provisions are delayed by 18 months (~May 2027)
Key Requirements
The National Data Governance Authority enforces the ordinance. Administrative fines, compensation, and criminal penalties apply for violations. The citizen ownership framing creates strong individual rights. The ordinance was promulgated via executive power, which may affect long-term stability.
How ConsentStack Handles This
ConsentStack applies explicit consent for Bangladeshi visitors, blocks tracking for minors, and respects the citizen data ownership framework.
Penalties
Administrative fines, compensation, or criminal penalties for unauthorized access, misuse, or illegal processing.
Key Requirements
- Explicit consent mandatory before collection, storage, transfer, or use
- Citizens recognized as rightful owners of their personal data
- Sensitive personal data subject to heightened safeguards
- Rights: access, correct, delete, restrict automated decisions
- Profiling and targeted advertising directed at minors prohibited
- Data controllers must demonstrate lawful basis for processing
Notable Provisions
- Promulgated as executive ordinance, not full parliamentary law
- Explicit prohibition on behavioral tracking of minors
- Citizens recognized as data owners — unique framing
- Some sections delayed by 18 months (~May 2027)
Other Asia Pacific Regulations
Frequently Asked Questions
What is unique about Bangladesh's data protection approach?
Bangladesh recognizes citizens as the rightful owners of their personal data and explicitly prohibits behavioral tracking and targeted advertising directed at minors.
Is Bangladesh's PDPO a permanent law?
It was promulgated as an ordinance under constitutional executive powers, not through full parliamentary legislation, which may affect its long-term stability.
When is Bangladesh's PDPO fully effective?
The ordinance was promulgated November 6, 2025. Some sections take effect 18 months later (~May 2027).
Stay compliant with Bangladesh PDPO
ConsentStack helps you implement Opt-in consent for Bangladesh automatically.