Do not repeat the same mistakes with cybersecurity

Transparency International Bangladesh’s concerns about the draft Cyber Security (Amendment) Act, 2026 deserve serious attention. 

As written, the proposed law risks repeating the mistakes of previous regimes -- vague language, unchecked authority, and broad surveillance powers had been a mainstay with previous cybersecurity laws.

There is no questioning the fact that such laws were used to silence dissent rather than protect citizens. Bangladesh cannot afford to walk that path again.

As rightfully noted by TIB Executive Director Dr Iftekharuzzaman: “The draft law brings three complex and distinct issues -- cybercrime, cybersecurity and people’s right to freedom of expression -- under a single law, without giving adequate attention to any of them."

Deliberate misinterpretation and misuse of our cyber laws have been weapons for the previous administration, violating the human rights of many. We must move away from vagueness in our laws that create a landscape where interpretation becomes discretionary, enforcement becomes arbitrary, and ultimately citizens become vulnerable. 

When terms such as “rumour,” “misinformation,” “demeaning,” “defamatory,” and “insulting to the state” are defined loosely, authorities have the power to target criticism, satire, or legitimate political speech. Our history suggests that such ambiguities have repeatedly been weaponized by the state at the expense of the people. 

Equally troubling is the proposal for a 28-member Cyber Security Council dominated by government representatives. A council structured this way risks becoming an enforcement arm rather than an independent oversight body. 

No good comes from sweeping powers without accountability, combined with immunity for actions taken in “good faith.” All they usually achieve is undermining the principle that all are equal before the law.

We are not arguing that Bangladesh’s digital space must be protected from cybercrime and genuine threats, which is a given. But protection cannot come at the cost of fundamental rights. 

Laws that blur definitions, expand surveillance, and criminalize expression do not strengthen cybersecurity but weaken democracy. Our digital future must be secure, but it must also be free. This is what the present administration must ensure.