1. Legal Framework Governing Privacy in Bangladesh

(a) Constitutional Protection

The Constitution of Bangladesh provides an indirect right to privacy under:

• Article 43: Protects the privacy of correspondence and communication.

Although not explicitly detailed for digital data, courts interpret this article broadly to include electronic communications and personal data.

(b) Cyber Laws

1. Cyber Security Act 2023
   • Replaced the Digital Security Act 2018.
   • Regulates unlawful access, data misuse, identity fraud, and digital offenses.
   • Important for online surveys because unauthorized collection or misuse of personal data may fall under cyber offenses.
2. Information and Communication Technology (ICT) Act 2006
   • Previously used to address digital crimes, though now largely replaced in practice.

(c) Sectoral Regulations

• Telecom regulatory guidelines (for SMS/email surveys)
• Institutional ethics rules (universities and NGOs conducting surveys)

2. Privacy Risks in Online Surveys

Online surveys in Bangladesh commonly face these privacy issues:

• Lack of informed consent (users not clearly told how data will be used)
• Data resale or sharing with third parties
• Collection of excessive personal information
• Weak encryption and insecure databases
• Use of fake survey links (phishing/scams)
• Tracking without user knowledge (cookies, IP logging)

3. Case Law Principles Relevant to Online Survey Privacy

Bangladesh has limited direct case law specifically on online survey privacy. Therefore, courts and legal analysts rely heavily on constitutional interpretation and persuasive foreign judgments. The following cases are commonly used to understand privacy rights in digital contexts:

1. Kharak Singh v State of Uttar Pradesh (1962, India)

• Established early recognition of “privacy-like” protections.
• The court struck down intrusive surveillance practices such as night visits by police.
• Relevance to surveys: Unauthorized tracking or repeated intrusive data collection in surveys may be considered an invasion of personal liberty.

2. People’s Union for Civil Liberties (PUCL) v Union of India (1997, India)

• Recognized telephone tapping as a violation of privacy unless strictly regulated.
• Introduced safeguards like prior authorization.
• Relevance: Online survey platforms collecting call records, phone numbers, or communications data must ensure lawful authorization and transparency.

3. Justice K.S. Puttaswamy v Union of India (2017, India)

• Landmark judgment declaring privacy a fundamental right.
• Established principles of:
  • Consent
  • Purpose limitation
  • Data minimization
  • Proportionality
• Relevance: Online surveys must collect only necessary data, with clear consent and defined usage purpose.

4. Google Spain SL v AEPD (2014, European Union)

• Introduced the “Right to be Forgotten.”
• Individuals can request removal of outdated or irrelevant personal data.
• Relevance: Survey respondents may demand deletion of their personal responses from databases after purpose completion.

5. Roman Zakharov v Russia (2015, European Court of Human Rights)

• Addressed mass surveillance and lack of safeguards.
• Held that uncontrolled data interception violates privacy rights.
• Relevance: Bulk collection of survey data without safeguards or oversight can be considered unlawful surveillance-like activity.

6. Carpenter v United States (2018, U.S. Supreme Court)

• Held that accessing historical cell phone location data requires a warrant.
• Recognized that digital metadata deserves strong privacy protection.
• Relevance: Online surveys collecting location/IP/device metadata must treat such data as sensitive personal information.

4. Key Privacy Principles for Online Surveys in Bangladesh

From constitutional interpretation and comparative case law, the following principles apply:

(1) Informed Consent

Participants must clearly understand:

• What data is collected
• Why it is collected
• Who will use it

(2) Purpose Limitation

Data collected for surveys cannot be reused for unrelated commercial or political purposes.

(3) Data Minimization

Only necessary data should be collected—not excessive personal details.

(4) Security Safeguards

Survey platforms must protect data using encryption, access controls, and secure storage.

(5) Transparency

Organizations must disclose:

• Data retention period
• Third-party sharing policies

(6) Right to Withdraw/Delete

Participants should be able to request removal of their data.

5. Conclusion

In Bangladesh, privacy in online surveys is still evolving legally. While there is no dedicated data protection statute yet, constitutional protections under Article 43, combined with cyber laws like the Cyber Security Act 2023, provide a partial framework.

Because of limited domestic case law, courts and legal practitioners rely heavily on international and comparative judicial precedents, especially from India, the United States, and the European Court of Human Rights, to interpret privacy in digital contexts.

As online surveys continue to expand in education, marketing, and governance, stronger enforcement and clearer data protection legislation will likely become necessary to ensure meaningful privacy protection in Bangladesh.