Cyber Security Act, 2026, AI-generated sexual content and CSAM ban
Cyber Security Act 2026, Act No. 81 of 2026, s.25 (offence and punishment relating to sexual harassment, blackmail, or publication of obscene content)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 21 May 2025.
An AI prohibited practices rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not send, publish, or broadcast, or threaten to send, publish, or broadcast, an image, video, audio-visual clip, or graphic created or edited by artificial intelligence for the purpose of blackmail, sexual harassment, revenge pornography, digital child-sexual-abuse material, or sextortion, or that was obtained or kept for that purpose; a higher penalty applies where the person targeted is a woman or a child under eighteen.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Up to 2 years' imprisonment, or a fine of up to BDT 1,000,000, or both, on conviction (s.25(2)); up to 5 years' imprisonment, or a fine of up to BDT 2,000,000, or both, where the offence is committed against a woman or a child under eighteen (s.25(3)).
What it reaches
Obligation class
Prohibition
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Section 25(1) makes it an offence for any person, through a website or other digital or electronic medium, intentionally or knowingly to send, publish, or broadcast, or threaten to send, publish, or broadcast, any information, video, audio-visual footage, still image, or graphics that is captured, edited, or created or edited by artificial intelligence, and displayable, where it was created for, obtained for, or preserved for the purpose of blackmail, sexual harassment, revenge pornography, digital child-sexual-abuse material, or sextortion, and is harmful or intimidating.
Section 25(2) sets the base penalty at up to two years' imprisonment, or a fine of up to BDT 1,000,000, or both; section 25(3) raises it to up to five years' imprisonment, or a fine of up to BDT 2,000,000, or both, where the victim is a woman or a child under eighteen.
The Act's own commencement clause deems it, including this section, to have come into force on 21 May 2025, the date its immediate predecessor, the Cyber Security Ordinance 2025, took effect; that Ordinance had itself replaced the Cyber Security Act, 2023.
When LexLint raises it
generates_content
Read the law
official statute text, Bangladesh Laws (bdlaws.minlaw.gov.bd)