Cyber Protection Act 2026 (Cyber Security Act 2026): the June 2026 amendment and the new draft changes

Background

The Cyber Protection Ordinance 2025 (commonly called the Cyber Security Ordinance 2025) replaced the Cyber Security Act 2023 and reduced several speech-related penalties. It was enacted as the Cyber Protection Act 2026, published on 10 April 2026. Within months the government moved to amend it, citing fake videos, audio and images made with artificial intelligence and misleading posts that cause unrest.

What the June 2026 amendment does

The amending Act passed on 30 June 2026 omitted section 20 (online gambling), because Parliament passed the Gambling Prevention Act 2026 on the same day. It did not add new offences, change the takedown powers or raise penalties. Those measures were discussed publicly at the time, but they belong to the later draft described below and are not yet law.

Proposed further changes: draft, not yet law

A further draft amendment was reported in July 2026 and published by the ICT Division for comment in September 2026. As drafted, it would:

• Add a new section 26A making it an offence to publish or spread unsubstantiated information that creates confusion, panic, unrest or social instability, with imprisonment of up to 10 years, a fine of up to Tk 40 lakh, or both
• Expand section 25 to cover recording, editing or publishing defamatory or derogatory material, expressly including AI-generated content, with up to 5 years’ imprisonment, a fine of up to Tk 20 lakh, or both
• Raise the maximum to 10 years and Tk 40 lakh where such content targets women or children under 18

The government has said the draft is not final. These proposed offences and penalties do not apply unless the amendment is passed by Parliament and published in the gazette. We will update this page if that happens.

What it means for victims

People targeted by fake profiles, deepfake images or videos, or malicious posts can already complain under the Cyber Protection Act 2026 and related laws. Save the links, screenshots and dates, report the content to the platform, and file a complaint with the police or the Cyber Tribunal. A takedown request can run alongside the criminal complaint.

What it means for people accused

The proposed rumour offence is broadly worded, and journalists, rights groups and others have raised concerns about its effect on free expression. If you are accused under the Act as it stands today, get advice early on whether the post falls within the section charged, whether it was true or an honest opinion, bail, and the procedural safeguards under the amended Code of Criminal Procedure. Do not delete material without advice, as that can raise evidence issues.

Sources

• Laws of Bangladesh: Cyber Protection Act 2026
• Dhaka Tribune: Cyber security amendment bill 2026 passes in parliament
• BSS: Cyber Security Amendment Bill 2026 passed in JS
• Prothom Alo (30 July 2026): draft amendment proposing up to 10 years for spreading rumours
• The Daily Star: Cyber Security Act draft changes echo DSA-era restrictions

Related services and guides

• Cybercrime & Digital Evidence
• Arrest, Bail & Remand
• Workplace Harassment