According to Section 2.1.6 and Section 2.1.8 of the National Online Mass Media Policy, broadcasters and newspapers in Bangladesh must register and obtain approval for their online portals separately. It is reported that they were permitted to operate websites without formal authorisation before the entry into force of this law.
In July 2023, the district administration of Chattogram reportedly ordered the closure of the offices of CplusTV, a news-sharing YouTube channel and Facebook account, as well as C Vision, a news-sharing Facebook page, on the grounds of "illegally operating without license", which could be connected to the license requirement in the National Online Mass Media Policy.

Pursuant to Art. 7 of the "Directives on Mobile Applications-Based (Over-the-Top, OTT) Calling Services of the IPTSP Operators, 2021", Internet Protocol Telephone Service Provider (IPTSP) operators seeking to offer mobile application-based calling services (OTT) are required to obtain approval from the Bangladesh Telecommunication Regulatory Commission (BTRC). Additionally, they must provide a bank guarantee of BDT 50 million (approx. USD 410,000) in favour of the BTRC and enter into a techno-commercial agreement with mobile network operators (MNOs).
The 2021 Directives are to remain applicable unless expressly repealed, withdrawn, amended, or replaced by the BTRC. However, their practical scope may be affected by the Telecommunications Network and Licensing Policy, 2025, as Clause 7.4.5 provides for the merger of IPTSP licences with the corresponding ISP licences during the migration to the new Fixed Telecom Service Provider (FTSP) framework.

Annexure 1, Part B of the Import Policy Order of 2021–2024 stipulates that the import of reconditioned office equipment, photocopiers, typewriters, telex machines, telephones, fax machines, old computers, old computer accessories, and other old electronic devices is prohibited in Bangladesh.

According to Clause 4.d of the Import Policy Order of 2021–2024, goods originating from Israel, those manufactured within its territory, and goods transported by vessels flying the Israeli flag shall not be eligible for importation.

Clause 10.1 of the Import Policy Order of 2021–2024 stipulates that prior approval from the Chief Comptroller of Import and Export is required for unregistered companies that import goods valued above USD 10,000.

Annex 2 of the Export Policy for 2024–2027 stipulates that a "No Objection Certificate" (NOC) from the Ministry of Information is required for the export of entertainment programmes, music, drama, films, documentary films, and similar content in any form. This restriction has been consistently included in every Export Policy since 2012.

It is reported that there is a lack of transparency in the standards domain. Approximately 1,500 out of 3,768 Bangladesh Standards (BDSs) remain unpublished. In addition, Bangladesh has yet to submit any notifications regarding draft measures, including technical regulations or conformity assessment procedures, to the WTO Committee on Technical Barriers to Trade.

It is reported that Bangladesh currently lacks a comprehensive type-approval system, governed by a dedicated law, to regulate the approval of telecommunication and radio equipment. Consequently, manufacturers and importers are required to obtain a "No Objection Certificate "(NOC) to import such devices. This certificate is issued upon the request of a licensed local importer and serves as confirmation that the equipment complies with at least the country’s fundamental regulatory requirements. To obtain the certificate, applicants must submit product specifications and test reports to the Bangladesh Telecommunication Regulatory Commission (BTRC), yet in-country testing is not required. An acceptable CE report is required for the issuance of a BTRC NOC in Bangladesh.

Pursuant to Section 3.1.18 of the Digital Commerce Operation Guidelines, all foreign digital commerce platforms conducting business in Bangladesh must register in the country and obtain the necessary approvals from the relevant authorities. In addition, in accordance with Section 3.1.13, measures shall be undertaken to ensure that all digital commerce platforms are progressively mandated to acquire a Unique Business Identification Number (UBID). Additionally, as stipulated in Section 3.1.9, the implementation of digital wallets, gift cards, cash vouchers, or other payment alternatives shall not be permitted without the Central Bank's approval.

It is reported that limitations have been imposed on both individual and institutional Internet Banking Fund Transfer (IBFT) transactions. For individual users, the maximum permissible amount per transaction is 300,000 taka (approx. USD 2,500), with a maximum transaction frequency of 10 times per day, not exceeding a total of 1,000,000 taka (approx. USD 8,000) per day. For corporate entities, the transaction limit is 500,000 taka (approx. USD 4,000) per transaction, with a maximum frequency of 20 transactions per day and a daily limit of 2,500,000 taka (approx. USD 21,000).

Reports indicate a daily transfer limit of Tk 50,000 (approx. USD 400) between mobile financial service accounts and bank accounts, and a monthly limit of Tk 300,000 (approx. USD 2,500). The limit applies in both directions.

Bangladesh maintains a highly stringent foreign exchange control regime. The country's foreign exchange laws are broadly applicable to any transaction involving foreign currency or the remittance of funds into or out of Bangladesh. No individual or entity is permitted to engage in foreign exchange dealings without obtaining prior authorisation from the central bank. Pursuant to Section 5 of the Foreign Exchange Regulation Act, 1947, no person in, or resident in, Bangladesh may, except under a general or special exemption granted by Bangladesh Bank, make payments to, or for the credit of, persons resident outside Bangladesh, place sums to their credit, or create or transfer payment rights in their favour. Separately, Section. 10 regulates the duties of persons entitled to receive foreign exchange or payments from persons resident outside Bangladesh. Reports indicate that these regulations affect the operations of fintech companies, preventing their customers from purchasing or selling products on e-commerce platforms using their preferred payment methods. Consequently, they must rely on intermediaries, such as friends, relatives, or agents, who possess access to foreign currency accounts or payment cards.

Section 29 of the Data Protection Ordinance provides that personal data, including public or open personal data, internal personal data, confidential personal data, and limited personal data as defined in the Schedule, may be transferred abroad subject to the conditions set out in Section 29 itself. Such transfers are permitted where the consent of the relevant data subject has been obtained, where the transfer is necessary for the exchange of goods or services under a contract to which the data subject is a party, or where, with the consent of the data subject, the transfer relates to matters concerning the data subject’s interests, such as business, education, emigration, or immigration. Also, personal data that is lawfully transferable may be transferred only to countries that possess appropriate technological and infrastructural safeguards for the storage of personal data, as prescribed by regulation. In cases involving the cross‑border transfer of large volumes of sensitive personally identifiable data, notification to the competent authorities is mandatory. For the purposes of this section, sensitive personally identifiable data refers to data whose large‑scale cross‑border transfer may pose risks to national sovereignty, national security, or financial stability, including government‑issued unique identification numbers such as national identity card numbers, passport numbers, and taxpayer or TIN or PAN numbers; biometric identifiers such as fingerprints, facial recognition data, and iris scans; genetic or DNA‑related information; and records of criminal convictions or criminal history.

Bangladesh has not joined any agreement with binding commitments to open transfers of data across borders.

The Data Protection Ordinance establishes a comprehensive framework for data protection in Bangladesh, although the competent authority has yet to be constituted. Section 1.3 stipulates that, with the exception of section 23 and sections 31 to 46, the Ordinance shall enter into force immediately. The excepted provisions are to come into operation on such date as the Government may determine by notification in the Official Gazette, following the expiry of 18 months from the date of promulgation of the Ordinance. The provisions subject to deferred commencement primarily concern the appointment of the chief data officer, the mechanisms for lodging complaints, and the imposition of administrative penalties.
Other relevant legislation includes the Cybersecurity Ordinance 2025, the Information and Communication Technology Act 2006, the Telecommunications Act 2001, the Contract Act 1872, the Consumers’ Rights Protection Act, the Penal Code 1860, and the Copyright Act 2000.