Cyber Security Act 2026: the June 2026 amendment and the new draft changes

Background

The Cyber Security Ordinance 2025 replaced the Cyber Security Act 2023 and reduced several speech-related penalties. It was enacted as the Cyber Security Act 2026, published on 10 April 2026. Within months the government moved to amend it, citing fake videos, audio and images made with artificial intelligence and misleading posts that cause unrest.

What the June 2026 amendment does

As reported when the bill was passed on 30 June 2026:

• Faster removal of harmful, defamatory or misleading content, including material generated by artificial intelligence
• Updated definitions of misinformation and defamatory content
• Stricter penalties for offences involving such content
• Stronger powers for the BTRC and authorised agencies to block content and to require platforms to remove content and provide user data

Check the gazetted text of the amending Act for the exact section numbers and penalties before relying on them in a particular case.

Proposed further changes: draft, not yet law

A further draft amendment was reported in July 2026 and published by the ICT Division for comment in September 2026. As drafted, it would:

• Add a new section 26A making it an offence to publish or spread unsubstantiated information that creates confusion, panic, unrest or social instability, with imprisonment of up to 10 years, a fine of up to Tk 40 lakh, or both
• Expand section 25 to cover recording, editing or publishing defamatory or derogatory material, expressly including AI-generated content, with up to 5 years’ imprisonment, a fine of up to Tk 20 lakh, or both
• Raise the maximum to 10 years and Tk 40 lakh where such content targets women or children under 18

The government has said the draft is not final. These proposed offences and penalties do not apply unless the amendment is passed by Parliament and published in the gazette. We will update this page if that happens.

What it means for victims

People targeted by fake profiles, deepfake images or videos, or malicious posts can already complain under the Cyber Security Act 2026 and related laws, and the June amendment strengthens the routes for removing harmful AI-generated content. Save the links, screenshots and dates, report the content to the platform, and file a complaint with the police or the Cyber Tribunal. A takedown request can run alongside the criminal complaint.

What it means for people accused

The proposed rumour offence is broadly worded, and journalists, rights groups and others have raised concerns about its effect on free expression. If you are accused under the Act as it stands today, get advice early on whether the post falls within the section charged, whether it was true or an honest opinion, bail, and the procedural safeguards under the amended Code of Criminal Procedure. Do not delete material without advice, as that can raise evidence issues.

Sources

• Laws of Bangladesh: Cyber Security Act, 2026
• Dhaka Tribune: Cyber security amendment bill 2026 passes in parliament
• BSS: Cyber Security Amendment Bill 2026 passed in JS
• Prothom Alo (30 July 2026): draft amendment proposing up to 10 years for spreading rumours
• The Daily Star: Cyber Security Act draft changes echo DSA-era restrictions

Related services and guides

• Cybercrime & Digital Evidence
• Arrest, Bail & Remand
• Workplace Harassment