Urgent need for stronger data protection

I am writing to express my strong support for the recent statement by Transparency International Bangladesh (TIB) on the theft and online sale of citizens' confidential information. The alarming nature of this data breach, which involves the misuse of IDs from law enforcement officials tasked with safeguarding sensitive information, underscores a significant threat to our constitutional commitments to protect personal data.
The misuse of the National Telecommunication Monitoring Centre (NTMC) system to collect and sell confidential information, including National Identity Card (NID) details and mobile call data records (CDR), highlights the urgent need for robust data protection mechanisms. TIB's call for severe punishment for those responsible is a crucial step toward addressing this growing concern.
As TIB Executive Director Dr. Iftekharuzzaman pointed out, repeated incidents of theft involving personal and sensitive information are not new in Bangladesh. Past occurrences of such breaches, coupled with the recent surge in these violations, demonstrate a clear failure of the current data protection framework. It is particularly troubling that law enforcement organisations, which are meant to safeguard this information, are now implicated in its misuse.
The enactment of the Personal Data Protection Act, 2024, must be expedited. However, TIB's review of the draft legislation highlights significant concerns, particularly the risk of granting government agencies unchecked authority over personal data under the guise of national security and public interest. It is imperative that any such legislation includes judicial oversight to prevent potential abuses of power and to ensure accountability.
The government's efforts to suspend the user IDs of implicated parties are a step in the right direction, but they are insufficient on their own. A thorough investigation must identify all individuals involved in this data trafficking, and they must face exemplary punishment to deter future breaches.
We must not view these incidents in isolation. They represent a systemic failure that requires comprehensive reforms. Ensuring the security of personal data is not just about preventing immediate harm; it is about upholding the rule of law and maintaining public trust in our institutions.

Imrul Hassan
A banker
Dhaka