Notes on Internet Privacy

Posts and research from the URnetwork team and community.

RSS

Deemed Abolished

In December 2025 Bangladesh was reported to have abolished the National Telecommunication Monitoring Centre — the agency whose surveillance a government-commissioned review calls routine and undocumented. The abolition was real, and it lasted 64 days. The Home Ministry extended the agency by letter eight days after February's election; in April the new parliament repealed the abolition and backdated the repeal across all 64 days; in May the government approved Tk 95 crore of traffic-inspection hardware for it. Eight rights organisations have now put the reversal to a Prime Minister whose own party, their letter notes, was among the surveilled.

The watched became the government

On 4 August 2026, Access Now published a letter dated 28 July, signed by eight organisations, Amnesty International and Human Rights Watch among them, and addressed to Bangladesh's new Prime Minister, Tarique Rahman. One sentence contradicts what the English-language record still says about his country:

"the amended statute continues to preserve the role of the National Telecommunication Monitoring Centre"

The record says the NTMC — the state's central interception agency — was abolished. It was, for 64 days. Then the parliament Rahman's party controls un-abolished it, and dated the un-abolition so that the statute book shows no gap.

The choice of addressee is the point. The letter reminds Rahman that members of his own Bangladesh Nationalist Party — the BNP — were among the surveilled, citing the UN fact-finding report on the July–August 2024 protests: surveillance-enabled abduction, arbitrary detention, enforced disappearance. The people the machine watched now command it.

Sixty-four days of abolition

A review the interim government commissioned into the procurement and use of surveillance technology — still unpublished, but read and quoted by The Daily Star — describes what the NTMC became: surveillance "transformed from an exceptional power into a routine practice," and the NTMC could not document who ordered interceptions, when, or on what grounds. Most instructions were verbal.

Ordinance No. 25 of 2026, made under the President's power to legislate while Parliament stands dissolved, commenced on 5 February 2026, seven days before the general election. Its section 97A(2)(d): "any previously existing interception agency or telecommunication monitoring centre or platform shall be deemed abolished" — replaced by a Centre for Information Support under the Ministry of Home Affairs, which "cannot initiate interception independently." "NTMC abolished," ran December's headlines — right about the instrument in front of them.

The un-abolition

Bangladesh voted on 12 February. The BNP took just under half the vote, and Rahman became Prime Minister. Presidential ordinances lapse thirty days after a new Parliament first sits, so the inherited pile had to be dealt with — 31 bills in a single sitting on 9 April. One became Act No. 51 of 2026, gazetted the next day. Section 69 repeals the Ordinance. Section 1(2) deems the Act in force from 5 February 2026 — the Ordinance's own first day.

So the Ordinance was law for 64 days, and the statute book records none of them: the consolidated statute's amendment trail dates 125 provisions to 5 February 2026 and says "Ordinance" nowhere.

The substituted interception section is a fraction of what it replaced — roughly 320 words where the Ordinance had roughly 1,700. The abolition clause is gone, and so is the Centre for Information Support: the statute in force names no monitoring centre and no successor, providing only that "the Government shall designate a central lawful-interception assistance agency." (The Bangla prevails; English renderings are our translation, cross-checked against the government's Unicode text.)

The ban on political spying was not paperwork

An elected chamber revisiting an unelected decree is not a scandal; it is the process working. And much of the Ordinance's 1,700 words never belonged in primary legislation: multi-factor authentication, penetration-test cycles, a three-tier organisational chart. Section 97A(9) provides for rules by gazette notification, the orthodox home for operational detail — and the eight organisations themselves ask for a new purpose-built statute, not the Ordinance restored.

Sort the deletions, though: four of them are nobody's operations manual. "No interception shall be conducted for political, ideological or belief-based reasons, or for the purpose of repression or revenge" is a rights rule. "Accountability" — one of four principles defining lawful interception, beside necessity, proportionality and legality — is a legal standard, and only the other three survived. The requirements that military intelligence obtain the head of government's permission, and that disciplined forces intercepting a civilian get a court's or the Review Council's approval, decide who commands whom. And the Ordinance made unauthorised interception itself an offence, carrying up to five years and Tk 1 crore. The Act creates no such offence.

What the Act kept is section 97C, inserted in 2006 and untouched since: it punishes any person who violates an interception order — three months and Tk 5 lakh rising to three years and Tk 50 lakh, with the court free to advise cancelling the offender's licence. The licence clause says who is meant. The penalty aimed at the state went; the one aimed at the operator who refuses to help stayed.

Eight days after the election, one more year

On 20 February 2026, a Home Ministry letter signed by Deputy Secretary KM Yasir Arafat told the NTMC's director general it could keep operating for one more year, "until necessary rules are formulated." The statute defines "the Government," for interception purposes, as the Ministry of Home Affairs — so the ministry that signed the extension also holds the pen that designates the interception agency. The rules the extension is waiting on could not be found, 118 days after the gazette. The government's law database has no register of subsidiary legislation at all, the Government Press domain does not resolve, and the regulator's English site returns a 404; read that as could not confirm, not as proof none exist.

Tk 95 crore for six data centres

On 20 May 2026, the Cabinet Committee on Government Purchase approved "Expansion of Content Blocking & Filtering System (Phase-1)," to be implemented by the NTMC: Tk 94,90,51,137. It buys equipment for six data centres — The Daily Star's gloss: the firewalls "enable deep packet inspection, allowing the NTMC to read the content of internet traffic," and the packet brokers "collect, decrypt, and distribute" it. The tender was limited on state-security grounds and won by Global Brand PLC of Dhaka; the importer is on the record, the manufacturer is not. And it is Phase-1 of an expansion — the NTMC disclosed in 2019 that it had already installed such a system.

The reformers outran their own review

The letter's sharpest procedural charge is easy to aim at the wrong target. An amendment, it notes, "was also passed and published in the gazette before the committee could submit its recommendations." The committee reported to then Chief Adviser Muhammad Yunus on 10 February 2026 — the 11th, by The Daily Star's account. The Ordinance commenced 5 February; the Act came two months later. So the criticism lands on the interim reformers, who gazetted their reform before their own review of the surveillance state could inform it. That report has now sat unpublished for 177 days, spanning both governments.

Still standing, to their credit

The shutdown prohibition survived word for word: no telecommunication service and no internet connection may be "shut down, obstructed or restricted intentionally or with dishonest intent" — a mens rea qualifier that is the interim government's own drafting, not a successor's dilution. Necessity, proportionality and legality survive in the operative test, along with least-intrusive-means, mandatory logs and destruction, and a Review Council in name. And section 97B(2) reaches further than many mature democracies: intelligence-only product is inadmissible as independent evidence unless re-proved by lawful process.

The receipts are on the government's server

Nobody lied. In English, only The Daily Star has covered the reversal, so a correct story about a draft is still the standing answer. The correction is possible at all because Bangladesh's own law database still serves the repealed Ordinance while printing, 125 times, the date the Act says it was always in force. A record that keeps its superseded drafts is what makes an official claim falsifiable.

The rules under section 97A(9) will decide whether the Review Council has members and emergencies have a clock. The NTMC's extension runs out around 20 February 2027. No government response to the letter had surfaced by 6 August — two days after publication, not long enough to characterise one. And if you cite Bangladesh's telecom reform, cite Act No. 51 of 2026, not the December headlines: 127.7 million registered voters live under the amended version, not the reported one.


References (8 sources)

References

  • Bangladesh Telecommunication (Amendment) Act, 2026 (Act No. 51 of 2026)Bangladesh Gazette, Extraordinary, Friday 10 April 2026, pp. 15843–15886; presidential assent 27 Chaitra 1432 / 10 April 2026; s.1(2) deemed commencement 5 February 2026; s.63 (s.97(2) substituted), s.64 (s.97A substituted), s.65 (s.97B), s.68 (new s.103), s.69 (repeal and savings); signed Barrister Md. Golam Sarwar Bhuiya, Secretary. Gazette PDF hosted by the Legislative and Parliamentary Affairs Division; Act number confirmed against the Division's 2026 Acts index.
  • Bangladesh Telecommunication Regulation (Amendment) Ordinance, 2026 (Ordinance No. 25 of 2026), dated 5 February 2026, made under art. 93(1) of the Constitution, repealed by Act No. 51 of 2026 — bdlaws.minlaw.gov.bd/act-1618.html and /act-print-1618.html (retrieved 6 August 2026; served as UTF-16BE). Ordinance s.97A(1)(a) (the four principles, with English glosses), s.97A(2)(c)–(d) (the CIS platform; "shall be deemed abolished"), s.32A, s.97(2), s.97C.
  • Bangladesh Telecommunication Act, 2001 (Act No. 18 of 2001), consolidated text and amendment footnotes — bdlaws.minlaw.gov.bd/act-857.html, /act-print-857.html, /act-details-857.html (retrieved 6 August 2026). Verified in this text: 125 footnotes citing Act No. 51 of 2026; 125 effective-date parentheticals, all reading "effective from 5 February 2026"; zero occurrences of "অধ্যাদেশ" (Ordinance); footnote 166 substituting s.97A by Act 51 s.64 and footnote 167 substituting s.97B by s.65, with no 2026 footnote on s.97C; s.97A(9) (rules by gazette notification) and s.97A(10) ("Government" means the Ministry of Home Affairs); s.97C penalties and the licence-cancellation limb; s.97B(2); footnote 169 and s.102 (Bangla prevails). Word counts computed on the Bangla; all English renderings of statutory text are this desk's own translation.
  • Subsidiary legislation searched, and the outcome: bdlaws.minlaw.gov.bd exposes no SRO or rules register (/act-857/sro-list.html and /sro_list.php?year=2026 both return a 404 body under HTTP 200; /act-details-857.html lists chapters and sections only); bgpress.gov.bd does not resolve (NXDOMAIN); btrc.gov.bd/en returns 404. Reported as a gap.
  • Joint Statement, "Surveillance and Interception in Bangladesh," 28 July 2026 — Access Now, Amnesty International, ARTICLE 19, CIVICUS, Fortify Rights, Human Rights Watch, Robert & Ethel Kennedy Human Rights Center, Tech Global Institute; addressed to PM Tarique Rahman, cc Home Affairs Minister Salahuddin Ahmed and Law Minister Md. Asaduzzaman. Notes that BNP members were themselves among surveillance targets; cites the UN OHCHR fact-finding report on the July–August 2024 protests (not separately retrieved) and the party's manifesto Bangladesh Before All. PDF hosted at hrw.org (media_2026/08/); text extracted with pdftotext -layout. Released by Access Now 4 August 2026 and by Tech Global Institute.
  • The Daily Star, "Govt keeps NTMC for another year," Mahmudul Hasan and Zyma Islam (page carries no publication date; the Home Ministry letter it reports is dated 20 February 2026 and signed by Deputy Secretary KM Yasir Arafat). Also reports the 22 November 2025 meeting chaired by home adviser Jahangir Alam — special assistant Faiz Ahmad Taiyeb arguing against retaining the NTMC, senior officers of police, RAB, BGB and Ansar for keeping or rebuilding it, planning adviser Wahiduddin Mahmud for further review — and quotes the unpublished high-powered committee report ("routine practice"; no documentation of who ordered interceptions, when, or on what grounds; reliance on verbal or informal instructions).
  • The Daily Star, "Govt okays Tk 95cr for NTMC's new equipment," 21 May 2026; The Asian Age (exact value Tk 94,90,51,137; Cabinet Committee on Government Purchase, 20 May 2026, chaired by Finance Minister Amir Khosru Mahmud Chowdhury; limited tender, Global Brand PLC selected); The Business Standard, 29 May 2026.
  • UNB, "Govt approves draft Bangladesh Telecommunication (amendment) Ordinance," 24 December 2025 (CIS established under s.97A); TechWorldBD, "Bangladesh Bans Internet Shutdowns, Dissolves NTMC" (agency history: established 2008 as the National Monitoring Centre within DGFI headquarters, renamed 2013); Desh Kalnews, "NTMC abolished, new body named CIS…". Dhaka Tribune, "Parliament passes 31 bills related to IG-era ordinances," 9 April 2026 (site returns 403; headline and bill list from search index, corroborated by the Acts index showing Act 51 between Acts 50 and 52).
  • Global Brand PLC, About Us — globalbrand.com.bd. 2026 Bangladeshi general election, 12 February 2026 — registered voters 127,711,793, turnout 59.44%, BNP 49.97%.

Further Discussion

The Watched Kept the Watchers

**The people this machine was used against now command it, and they chose continuity.** The joint letter to Prime Minister Tarique Rahman leans on a fact his party cannot dispute: BNP members were themselves among the surveilled, in the years the UN fact-finding report on the 2024 protests describes — surveillance-enabled abduction, arbitrary detention, enforced disappearance. The interim government's Ordinance deemed the National Telecommunication Monitoring Centre "abolished" on 5 February 2026, seven days before the election that brought the BNP to power. Eight days after that election, a Home Ministry letter gave the National Telecommunication Monitoring Centre — the NTMC, the state's central interception agency — one more year. Two months after that, Parliament deleted the abolition. **And the deletion was dated backwards, so the statute book shows no abolition to reverse.** Act No. 51 of 2026, gazetted 10 April, repeals the Ordinance and deems itself in force from 5 February — the Ordinance's own first day. In the government's consolidated statute, the amendment trail dates 125 provisions to 5 February 2026 and says "Ordinance" nowhere. The safeguards that were law for 64 days — the ban on interception "for political, ideological or belief-based reasons," the word "accountability" in the definition of lawful interception, the head of government's sign-off for military intelligence, an offence of unauthorised interception carrying five years — now exist only in a repealed text the law database happens to preserve. **Follow what did survive.** The extension letter was written under a statute that deemed the NTMC abolished; the Act's savings clause preserved the letter and deleted the clause. Section 97C, untouched since 2006, still punishes the operator who **violates** an interception order — up to three years, with the court free to advise cancelling a licence — while the Act creates no offence of intercepting unlawfully. And on 20 May the Cabinet Committee on Government Purchase approved Tk 94,90,51,137 of deep-packet-inspection and traffic-decryption hardware for six data centres, for the agency the standing record says was abolished. **The strongest reply:** an elected parliament may lawfully undo an unelected decree, and backdating is ordinary drafting. Both true. Neither explains why the four provisions that protected people rather than procedures all left together, or why the one penalty that survived points at the licensee who refuses to help.

Infographic description

This infographic presents “The Watched Kept the Watchers.” Text shown in the graphic, in reading order: HOT TAKE 1 · NOTES ON INTERNET PRIVACY · 2026-08-06 · EDITION 01 · https://ur.io · SIXTY-FOUR DAYS · OFF THE BOOKS · THE CLAUSE THAT DID THE ABOLISHING IS ONE OF THE THINGS THAT WENT · Bangladesh's safeguards were law from 5 February to 10 April 2026 — then an Act backdated to the Ordinance's own first day replaced them, and the statute book shows no period in which they existed · any previously existing interception agency or telecommunication monitoring centre or platform shall be deemed abolished · — Ordinance No. 25 of 2026, s.97A(2)(d) — repealed. In the Act now in force, “Monitoring Centre” appears zero times · THE SAFEGUARDS WERE LAW FOR · 64 days · 5 February to 10 April 2026 · AMENDMENT FOOTNOTES · 125 · all 125 dated “effective from 5 February 2026” · “ORDINANCE” IN THAT TRAIL · 0 · the repealed instrument leaves no trace behind · “ACCOUNTABILITY” · 0 · one of four principles in the Ordinance's own test · The five-year offence of unlawful interception was deleted. s.97C — punishing whoever violates an order — survives untouched from 2006. · Sources: Ordinance No. 25 of 2026 (repealed) · Act No. 51 of 2026, ss.1(2), 69, 97A–97C · consolidated Act No. 18 of 2001 — bdlaws.minlaw.gov.bd · URnetwork · https://ur.io · 2026-08-06

An Ordinance Is Not a Promise

**Start with what the Ordinance was: a decree by an unelected caretaker, issued seven days before an election.** It was made on the President's bare satisfaction, with Parliament dissolved, and the Constitution obliged the incoming Parliament to deal with it — such instruments lapse thirty days after the new house first sits. Parliament dealt with the inherited ordinances in bulk, 31 bills in one sitting on 9 April 2026, and backdating each Act to its ordinance's commencement is the conventional way to avoid a legal vacuum. Nothing was hidden: the repeal is in section 69, the commencement in section 1(2), and the 125 amendment footnotes are published by the government itself — which is exactly how this desk found the story. **Most of what was deleted was an operations manual, and the Act says where it goes.** The Ordinance's interception section legislated multi-factor authentication, penetration-test cycles, role-based access control and a three-tier organisational chart. Freeze that in primary legislation and every hardware refresh needs an Act of Parliament. Section 97A(9) provides for rules by gazette notification — the orthodox home for operational detail — and even the eight signatories ask for a new purpose-built statute, not the Ordinance restored. **And what Parliament chose to keep is not nothing.** The internet-shutdown prohibition survived word for word — "shut down, obstructed or restricted intentionally or with dishonest intent," a mens rea qualifier that is the interim government's own drafting. Necessity, proportionality and legality survive in the operative test, with least-intrusive-means, mandatory logs and destruction, and a Review Council. Section 97B(2) makes intelligence-only product inadmissible as independent evidence unless re-proved — a discipline several mature democracies lack. A government stripping safeguards in the dark does not keep the headline reform in an omnibus almost nobody read. One year of administrative continuity while a successor regime is built is ordinary, and the extension is time-limited and conditional. **One limb of this take we cannot answer, and say so:** an elected chamber outranks a caretaker's decree, and it was constitutionally required to act. That is airtight. What it does not cover is narrower: the extension's own condition — "until necessary rules are formulated" — with no rules findable 118 days after the gazette, and a Tk 94.9 crore purchase that did get done in the same window.

Infographic description

This infographic presents “An Ordinance Is Not a Promise.” Text shown in the graphic, in reading order: HOT TAKE 2 · NOTES ON INTERNET PRIVACY · 2026-08-06 · EDITION 01 · https://ur.io · THIRTY-ONE BILLS · ONE SITTING · AN ELECTED PARLIAMENT LEGISLATED DIFFERENTLY — AND HID NONE OF IT · The Ordinance was made by an unelected administration with Parliament dissolved; the Constitution obliged the incoming Parliament to dispose of it, and every step is in the published gazette · no telecommunication service and no internet connection may be shut down, obstructed or restricted intentionally or with dishonest intent · — s.97(2), carried through the Act word for word — and that mens rea qualifier is the interim government's own drafting · WHO MADE THE ORDINANCE · Unelected · art. 93(1), Parliament dissolved, 7 days before the poll · CONSTITUTIONAL DEADLINE · 30 days · art. 93(2) — inherited ordinances lapse once Parliament sits · DISPOSED OF IN ONE SITTING · 31 bills · 9 April 2026, by the elected Parliament · THE SHUTDOWN BAN · Verbatim · plus s.97B(2): intelligence-only product inadmissible · Operational detail belongs in rules, not an Act — s.97A(9) says so, and s.97A(10) names who must write them: the Home Ministry. · Sources: Ordinance No. 25 of 2026 (repealed) · Act No. 51 of 2026, ss.1(2), 69, 97A–97C · consolidated Act No. 18 of 2001 — bdlaws.minlaw.gov.bd · URnetwork · https://ur.io · 2026-08-06

Comics

#1The Watched Kept the Watchers
Meme description

This editorial meme presents “The Watched Kept the Watchers.” Text shown in the graphic, in reading order: HOT TAKE 1 · NOTES ON INTERNET PRIVACY · 2026-08-06 · EDITION 01 · https://ur.io · WHO FORCE-PUSHED THE STATUTE BOOK · a meme · the force-push genre · 125 files changed, all dated the same day · bdlaws.minlaw.gov.bd · main · $ git log --oneline -- s97A · a51e026 Act 51 of 2026 — 5 Feb 2026 · 1806f05 Act 18 of 2001 — 16 Apr 2001 · $ git log --oneline --grep=Ordinance · (no matches) · # 64 days of history, gone from the log · 🤨 · “it's just a rebase, we kept everything” · the abolition clause: deleted in the same commit · THE DIFF NOBODY REVIEWED · 125 · footnotes, one date between them · 0 · times “Ordinance” appears · 1,700 words in · about 320 words out · Good news: the government's own law database still serves the repealed branch. · That is the entire reason anyone can prove this. Keep your reflog. · URnetwork · https://ur.io · Notes on Internet Privacy · 2026-08-06 · Notes on Internet Privacy · meme · 2026-08-06 · URnetwork · https://ur.io · 2026-08-06

#2An Ordinance Is Not a Promise
Meme description

This editorial meme presents “An Ordinance Is Not a Promise.” Text shown in the graphic, in reading order: HOT TAKE 2 · NOTES ON INTERNET PRIVACY · 2026-08-06 · EDITION 01 · https://ur.io · LGTM — MOVED TO A CONFIG FILE · a meme · the code-review genre · approved, merged, and the config never landed · PULL REQUEST #51 · 31 commits · merged 9 Apr 2026 · refactor: extract operational detail to rules · - multi-factor authentication, pen-test cycles · - role-based access control, three-tier org chart · + see s.97A(9): rules by gazette notification · reviewers: an elected Parliament ✓ · 🤓 · “You don't hard-code the org chart in · primary legislation. This is correct.” · and it genuinely is — freeze it and every refresh needs an Act · STATUS OF THE CONFIG FILE · 🤔 · Not found · no rules under s.97A(9) located · and no register we can reach would · list them if they existed — so: unknown, · not absent. We say which registers failed. · s.97A(10): the Home Ministry holds the pen · The refactor argument is good. The shutdown ban did survive word for word. · It just doesn't explain why the abolition clause and the offence left too. · URnetwork · https://ur.io · Notes on Internet Privacy · 2026-08-06 · Notes on Internet Privacy · meme · 2026-08-06 · URnetwork · https://ur.io · 2026-08-06