Introduction

Overview of the Legal Framework

Key Categories of Cyber-Related Allegations

• Unauthorized access to computer systems and networks (commonly referred to as hacking);
• Identity theft, impersonation and fraudulent use of credentials;
• Online harassment, stalking, doxxing and other forms of targeted abuse;
• Distribution of allegedly false, defamatory or obscene content online;
• Interference with digital services, including distributed denial of service attacks; and
• Data breaches and unauthorised disclosure of sensitive personal or corporate information.

Initial Practical Steps After an Incident

1. Preserve and record evidence

2. Contain the incident

3. Document decision-making and communications

4. Preserve forensic integrity

Reporting a Suspected Cyber Crime

• Filing a complaint with local police; and
• Reporting to the Cyber Crime Unit of the Bangladesh Police where the alleged offence appears to involve computer systems, network intrusions or organised online offences. For general contact information for Bangladesh Police see their official site at https://police.gov.bd/.

Interactions with Law Enforcement and Prosecutors

• Assessment of jurisdiction and whether any cross-border elements require coordination with other agencies;
• Digital forensics and preservation orders to secure evidence;
• Interviews and statements from affected parties and witnesses; and
• Decisions by prosecutors about whether to lay charges and which offences to pursue.

Civil Remedies and Private Litigation

Intermediaries, Takedown Requests and Platform Notices

Data Protection, Breach Notification and Compliance (Practical Considerations)

• Assess applicable legal and contractual notification obligations promptly;
• Prepare communications to affected individuals that are factual, measured and consistent with legal advice; and
• Coordinate with forensic and communications specialists to manage reputational and operational risks.

Cross-border and Mutual Legal Assistance Issues

• The location of relevant servers and service providers;
• Whether mutual legal assistance (MLA) treaties or direct co-operation mechanisms are available between Bangladesh and the other jurisdiction(s);
• Which forum is most appropriate for civil claims or criminal prosecution; and
• Costs and anticipated timescales for cross-border evidence requests.

Investigations and Digital Forensics

• Creating forensic images of relevant storage media;
• Collecting and preserving metadata;
• Documenting tooling and methods used during analysis; and
• Ensuring forensic reports explain both findings and limitations.

Responding When You Are Accused

• Secure legal representation promptly to protect legal rights and to advise on interview and disclosure obligations;
• Preserve relevant records and avoid altering or deleting potential evidence; and
• Consider whether internal disciplinary or compliance procedures should be put on hold pending external investigations.

Corporate Governance, Policies and Preventive Measures

• Establishing an incident response plan that sets out roles, escalation triggers and communication protocols;
• Maintaining up-to-date user access controls and multi-factor authentication for key systems;
• Training staff on phishing, credential security and reporting protocols; and
• Including cyber-incident clauses in standard commercial contracts to clarify responsibilities for security and notifications.

Sector-Specific Considerations

Practical Litigation Considerations

• Whether to pursue interim relief (injunctions) to stop ongoing harm;
• How to frame causes of action to maximise the chance of obtaining timely relief;
• Planning for discovery and cross-examination that may implicate technical evidence; and
• Considering settlement and alternative dispute resolution where appropriate.

2026 update

Common Errors to Avoid

• Failing to preserve original records or to document the chain of custody;
• Deleting or altering files before forensic imaging and without documenting the reason for doing so;
• Delaying reporting where delay may lead to loss of evidence or breach of regulatory notification timelines; and
• Using public statements that admit facts before legal advice is taken.

When to Seek Specialist Advice

• You anticipate or receive a formal notice, subpoena or request from law enforcement or a regulator;
• There are cross-border elements that involve servers, defendants or witnesses in other jurisdictions;
• Significant financial, reputational or operational impact is possible; or
• Complex technical evidence will be central to any dispute.

Practical Step-by-Step Checklist

1. Secure systems to prevent further harm (isolate affected devices, change credentials where required).
2. Preserve primary evidence and create secure copies; document chain of custody.
3. Engage a forensic specialist if practical before extensive analysis.
4. Record a timeline of events and maintain a communication log.
5. Report the incident to the appropriate law enforcement authority (for example, the Cyber Crime Unit of the Bangladesh Police via https://police.gov.bd/) if the facts suggest criminal conduct.
6. Consider civil options and interim relief; consult counsel about the realistic prospects of recovery and enforcement.
7. Notify affected individuals and counterparties where legal or contractual obligations apply, after taking legal advice on the content and timing of notifications.
8. Review and update internal controls, policies and incident response plans based on lessons learned.

How a Law Firm Can Assist

Case Management and Costs

Five Practical FAQs

Concluding Remarks