Bangladesh
5 regulators · 10 laws & regulations · 5 obligations
Bangladesh is a unitary republic in South Asia: Article 1 of its Constitution describes it as a unitary, independent, sovereign Republic and Article 94 establishes a Supreme Court.
Overview
Bangladesh is a unitary republic in South Asia: Article 1 of its Constitution describes it as a unitary, independent, sovereign Republic and Article 94 establishes a Supreme Court. The World Bank classifies it as lower middle income and puts its population at about 175.7 million in 2025, and the IMF reports nominal GDP of about 55,029 billion taka for the fiscal year to June 2025. The IMF describes an export base dominated by ready-made garments, at 85% of total exports, and expects remittances to stay at around 6% of GDP. Germany Trade & Invest describes the legal system as rooted in English common law, with parliamentary Acts as the main source. Muslim personal law (Shariat) applies to Muslims in family and succession matters under the Muslim Personal Law (Shariat) Application Act 1937.
The IMF's 2025 Article IV report (January 2026) records real GDP growth of 3.7% in FY25, average inflation of 10.0% and gross reserves of about US$26.7 billion. It reports system-wide non-performing loans of 34% at end-June 2025 and traces the stress in banking to unsuitable ownership, excessive related-party lending and weak supervision. The APG mutual evaluation adopted in 2016 described corruption-related laundering as the biggest unmitigated money laundering risk. The 2015 national risk assessment it cites rated corruption, fraud, forgery, human trafficking and smuggling as high threats and named banks, finance companies, real estate and jewellers among the highest-risk sectors. The IMF expects the fourth APG mutual evaluation in 2027.
Bangladesh Bank, the central bank set up under the Bangladesh Bank Order 1972, lists among its functions supervising banks, non-bank financial institutions and the payment system; it administers the Bank Company Act 1991 and the Payment and Settlement System Act 2024. The Bangladesh Financial Intelligence Unit (BFIU), housed within Bangladesh Bank, supervises reporting organisations under the Money Laundering Prevention Act 2012 and the Anti-Terrorism Act 2009. The Bangladesh Securities and Exchange Commission (BSEC) regulates capital markets, the Insurance Development and Regulatory Authority (IDRA) regulates insurance, and the Microcredit Regulatory Authority covers NGO microfinance. The Anti-Corruption Commission works under the Anti-Corruption Commission Act 2004. Personal data is governed by the Personal Data Protection Act 2026, which names as its authority the National Data Management Authority under the National Data Management Act 2026; whether that Authority is operating was not confirmed. The Cyber Security Act 2026 provides for a National Cyber Security Agency.
BFIU guidance describes section 20A of the Anti-Terrorism Act 2009 as the basis for implementing UN Security Council resolutions 1267, 1373 and the weapons-of-mass-destruction resolutions, with assets frozen without delay and without prior notice. It says the Ministry of Foreign Affairs issues a statutory regulatory order under the United Nations (Security Council) Act 1948 and BFIU directs reporting organisations. It expects reporting organisations to screen customers and cross-border payments, including SWIFT messages, against terrorist and sanctions lists, to stop a matching transaction and to report it to BFIU within the next working day. The sources reviewed describe no autonomous national or regional sanctions regime, so firms there meet sanctions exposure through these screening duties.
| Law or regulation | Type | Year | Regulator | Source |
|---|---|---|---|---|
| ব্যক্তিগত উপাত্ত সুরক্ষা আইন, ২০২৬ (Personal Data Protection Act, 2026) | Act | 2026 | — | official |
| সাইবার সুরক্ষা আইন, ২০২৬ (Cyber Security Act, 2026) | Act | 2026 | — | official |
| পরিশোধ ও নিষ্পত্তি ব্যবস্থা আইন, ২০২৪ (Payment and Settlement System Act, 2024) status not recorded | Act | 2024 | BB | official |
| Guideline on Sustainability and Climate-related Financial Disclosure for Banks and Finance Companies (SFD Circular No. 06 of 2023) status not recorded | Guideline | 2023 | BB | official |
| Foreign Exchange Policy Department, FE Circular No. 24 of 15 September 2022: Prohibition regarding virtual assets and virtual currencies status not recorded | Circular | 2022 | BB | official |
| Money Laundering Prevention Act, 2012 (Act No. 5 of 2012) | Act | 2012 | BFIU | official |
| Insurance Act, 2010 (Act No. XIII of 2010) status not recorded | Act | 2010 | IDRA | official |
| No instruments match these filters. | ||||
Industry compliance
Essential obligations
All obligations →| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Lawful basis, notice and data subject rights | Ongoing | — | source | |
PDPA 2026 s.5 makes consent the main lawful basis: it must be voluntary, specific, clear and withdrawable, the data subject must be told the purpose, retention period, transfers and withdrawal process, and the fiduciary must prove it. Section 5(3) lists cases needing no consent. Data subjects have access and portability (s.11), correction (s.12, concerned parties told within 30 days of a correction) and withdrawal of consent and erasure (s.13). Section 15(2) adds transparency information. Response times for access and erasure are left to regulations. |
||||
| Disclose sustainability and climate-related information | Annual report disclosure; half-yearly regulatory submission | BB | official | |
The guideline requires banks and finance companies to disclose sustainability and climate-related information in the annual report from the financial year starting January 2024 (s.5) and to make semi-annual submissions to Bangladesh Bank's Sustainable Finance Department (s.8(c)). Section 9 requires limited assurance on the reported information in the annual report. |
||||
| Refrain from dealing in or facilitating virtual assets and virtual currencies | Continuous prohibition | BB | official | |
FE Circular No. 24 of 15 September 2022 tells banks, authorised dealers, mobile financial service providers and financial institutions to refrain from dealing in virtual assets and virtual currencies and from facilitating their exchange, transfer or trading. It also bars retaining export proceeds abroad in any form, including crypto. No licensing route for virtual asset service providers was found. |
||||
| Report suspicious transactions to the BFIU | Without delay | BFIU | source | |
MLPA 2012 s.25(1)(gha) requires a reporting organisation to file a suspicious transaction report with the BFIU, on its own initiative and without delay, when it notices a suspicious transaction or an attempt at one. Section 25(2) allows a fine of BDT 50,000 to 2.5 million, and cancellation of the licence or permission to operate or referral to the licensing authority, for breach of s.25(1). |
||||
| Retain customer account and transaction records after account closure | At least 5 years after account closure | BFIU | source | |
MLPA 2012 s.25(1)(kha) requires reporting organisations to keep a customer's account and transaction records for at least five years after the account is closed, and s.25(1)(ga) to give them to the BFIU when asked. |
||||
| No obligations match these filters. | ||||
Quick links — official sites
- BB — Bangladesh Bank
- BFIU — Bangladesh Financial Intelligence Unit
- BSEC — Bangladesh Securities and Exchange Commission
- IDRA — Insurance Development and Regulatory Authority
- BGD e-GOV CIRT — BGD e-GOV CIRT
Newsletter
Get CRCGS Weekly
A free weekly email from the Centre for Risk, Compliance & Governance Studies: the week's regulatory news, new regulations, updated country profiles, and the Knowledge Hub's latest reading and events.