The Transparency International Bangladesh (TIB) has expressed concerns over the Personal Information Protection Act, 2024 (Draft), which could be misused like the Digital Security Act, as it could expose personal data in the name of personal data protection.
The anti-graft watchdog urge the government to consider its recommendations including reinforcing fundamental rights, narrowing the scope to focus on personal data, reconsidering or eliminating data localization requirements, establishing an independent authority for data protection, implementing judicial oversight for accessing personal data, limiting exemptions for activities deemed to be in the public interest, and introducing a phased enforcement schedule.
The call came out at a press conference jointly organised by the TIB and Article 19 – a human rights organisation, at the capital's Dhanmondi on Sunday.
TIB Executive Director Dr Iftekharuzzaman attended the event, while Towhidul Islam, director (Outreach and Communication), moderated the session. Article 19 Regional Director (Bangladesh and South Asia) Sheikh Manjur-E-Alam presented the keynote paper.
Dr Iftekharuzzaman said, “It is commendable that the government has engaged various stakeholders before drafting this law. This draft is better than the previous one but the issue of regulation in the name of personal data protection remains.
“The draft is expected to be presented to parliament soon and stakeholders like us and other civil society organisations are concerned that could turn the act into a control tool. We urge the government to consider our recommendation before enacting the law.”
Sheikh Manjur-E-Alam said, “This could weaken transparency and accountability, and reduce individual control over personal information. The PDPA should reference existing constitutional protections for privacy and freedom of expression.”
“There should be judicial oversight on what to call national security and what to call public interest. Also we propose an independent data protection commission should be formed under this act to ensure proper enforcement of data protection principles.”
