The much-debated Cyber Security Act has been repealed and replaced by the newly approved Cyber Protection Ordinance, prepared by the interim government. The ordinance was passed during a Cabinet meeting of the Advisory Council on Tuesday. Officials stated that the ordinance aims to strengthen the country’s cyber security framework, enhance digital safety, and protect citizens from online threats.
According to sources, following a review by the Legislative and Parliamentary Affairs Division, the draft of the “Cyber Protection Ordinance 2024,” presented by the ICT Division, was approved during the meeting.
At a press conference held in the afternoon at the Foreign Service Academy auditorium, Chief Advisor’s Press Secretary Shafiqul Alam announced the approval. “The Advisory Council meeting discussed the Cyber Protection Ordinance and has given its final approval to the draft,” he said. The press conference was also attended by Deputy Press Secretary Apurba Jahangir and Assistant Press Secretary Suchismita Tithi.
Earlier, on December 12, the interim government, led by Nobel Peace Prize laureate Dr. Muhammad Yunus, gave initial approval to the draft ordinance during an Advisory Council meeting chaired by Dr. Yunus.

The ordinance follows widespread criticism and protests against the misuse of the Digital Security Act under the previous Awami League government, which was overthrown by a student-led uprising. The subsequent Cyber Security Act, 2023, also faced backlash for perpetuating a culture of arrests and suppressing dissent. In response, the interim government drafted the Cyber Protection Ordinance, 2024, last month to address these concerns.
The ordinance defines “cyber protection” as safeguarding digital devices, computers, systems, data, traffic data, and physical infrastructure in cyberspace, along with the security of personal, banking, or business information. It also emphasizes ensuring authorized access to portals or networks.
The draft states: “By repealing the Cyber Security Act, 2023, this law has been formulated to ensure cyber protection, detect, prevent, and suppress crimes committed in cyberspace, and establish legal provisions for their adjudication.” Cyberspace is defined as the virtual realm of interconnected digital networks, encompassing the internet, telecommunication systems, computer networks, and other electronic communication systems where data is created, accessed, transmitted, stored, and managed.
The draft comprises nine chapters and 52 sections, including provisions for a National Cyber Protection Agency, a National Cyber Protection Council, preventive measures, offenses and penalties, and the investigation and adjudication of cyber crimes. Special attention has been given to ensuring personal freedom and freedom of speech, with efforts to rationalize non-bailable offenses.