A fast-moving bill, an old pattern
On June 30, 2026, the Jatiya Sangsad passed the Cyber Security (Amendment) Bill 2026 by voice vote, three days after Posts, Telecommunications and Information Technology Minister Fakir Mahbub Anam placed it before the House. Jamaat-e-Islami and independent lawmakers asked that it go to a review committee for public input first; the request was rejected by voice vote and the bill passed the same week (bssnews.net). The law gives the Bangladesh Telecommunication Regulatory Commission (BTRC) and "other authorized agencies" the power to block online content, compel platforms to remove AI-generated harmful or defamatory material within a set deadline, and demand user data directly from platforms (bssnews.net).
The minister's stated justification is specific and, on its face, reasonable: neighboring countries already require platforms like Meta to act on flagged content within 24 hours, while Bangladesh's law contained no comparable enforcement deadline. That is a real gap. Generative AI has made fabricated video and audio cheap to produce and hard to debunk before it spreads, and a law with no compliance clock invites platforms to slow-walk takedown requests indefinitely. A government facing viral deepfakes ahead of its first full year in office has a legitimate interest in a faster mechanism — that case deserves to be taken seriously rather than dismissed as pretext.
What makes this amendment different from a narrow deepfake fix
The problem is what the amendment does beyond the deepfake deadline: it hands BTRC and unnamed "other agencies" a blocking power and a user-data demand power with no court in the loop described in the reporting so far, and it revises the statutory definitions of misinformation and defamation while raising penalties (bssnews.net). Vague definitions paired with executive blocking authority is precisely the combination Bangladesh has cycled through twice already this decade.
The law this amendment sits on top of
Context matters here, because Bangladesh isn't legislating on a blank slate. The 2018 Digital Security Act was renamed the Cyber Security Act in 2023 while retaining, by Amnesty International's count, 58 of the DSA's 62 provisions. After Sheikh Hasina's government fell in August 2024, the interim administration under Muhammad Yunus repealed that law and replaced it, effective May 21, 2025, with a Cyber Security Ordinance that dropped nine of the most contentious provisions and — notably — added avenues for appeal against content-removal orders that the prior law lacked, according to Freedom House's assessment (Freedom House, Freedom on the Net 2025). That reform helped drive Bangladesh's Freedom on the Net score up five points to 45/100, the largest single-year improvement of any of the 72 countries Freedom House assessed that year — while the country remained rated only "Partly Free" (Freedom House).
The BNP, which won February 2026's election in a landslide and installed Tarique Rahman as prime minister, spent years in opposition condemning the DSA/CSA framework as a tool of political repression. Its government is now the one widening the executive's blocking and data-demand authority under the ordinance's successor statute — a reversal of direction from the party's own stated position, not merely a technical update.
Why the safeguards being weakened matter
Content-blocking powers without independent review have a documented failure mode in Bangladesh specifically. Under the pre-2025 framework, BTRC blocked outlets and social media accounts on national-security and "anti-state content" grounds with limited transparency about criteria or appeal (The Daily Star). The 2025 ordinance's appeal mechanism was one of the few concrete checks added after that experience. An amendment that expands who can order a block and how fast platforms must comply, without expanding who can review that order afterward, risks re-creating the enforcement pattern the reform was designed to interrupt — just with a faster clock.
The stakes are already visible in Bangladesh's press-freedom trajectory. Reporters Without Borders ranked Bangladesh 152nd of 180 countries in its 2026 World Press Freedom Index, down three places from 149th in 2025 and placed in the index's "very serious" category, citing reduced tolerance for critical journalism and pressure from political actors (The Hans India). Freedom House's 2026 country report separately notes that journalists and ordinary citizens "continued to face arrest and extralegal violence in connection with their speech" even after the 2025 legal reform (Freedom House, Freedom in the World 2026). Broadening takedown authority against that backdrop, without matching judicial oversight, is the part of this bill that deserves scrutiny — not the deepfake-response deadline itself.
The fix that would preserve the legitimate goal
A workable version of this law is not hard to specify: keep the compliance deadline for verified AI-generated defamatory content, but route blocking orders and user-data demands through the same appeal mechanism the 2025 ordinance introduced, with published criteria for what counts as "harmful" so platforms and courts can test orders against a standard rather than agency discretion. Bangladesh already wrote that safeguard into law once, fourteen months ago. Amending it away in the name of speed, rather than building the deepfake deadline around it, is a choice — and reporting on the bill's passage gives no indication that choice was debated on the floor.