BEPZA & SEZ Physical Security: Requirements for Bangladesh's Special Economic Zones

Bangladesh operates two parallel frameworks for special economic zones: the Export Processing Zones (EPZs) managed by BEPZA (Bangladesh Export Processing Zones Authority), established in 1980; and the Special Economic Zones (SEZs) developed under BEZA (Bangladesh Economic Zones Authority), established under the Bangladesh Economic Zones Act 2010. Together, these zones host thousands of enterprises spanning garments, textiles, footwear, electronics assembly, food processing, and light manufacturing.

If you operate a factory or enterprise within a BEPZA EPZ or BEZA SEZ, you operate under a distinct regulatory framework that includes specific physical security requirements beyond those applicable to general industrial areas. This guide explains what security compliance requires in these zones, where common inspection gaps are found, and how to maintain compliance as zone authorities tighten enforcement.

The Two Zone Authorities: BEPZA and BEZA

BEPZA: The Established EPZ Framework

BEPZA administers 8 Export Processing Zones across Bangladesh:

1. Chittagong EPZ (the original and largest, established 1983)
2. Dhaka EPZ (Savar, Dhaka)
3. Mongla EPZ (Bagerhat)
4. Comilla EPZ
5. Ishwardi EPZ (Pabna)
6. Uttara EPZ (Nilphamari)
7. Adamjee EPZ (Narayanganj)
8. Karnaphuli EPZ (Chittagong)

BEPZA enterprises operate under a specific labour and regulatory framework — including their own labour rules under the EPZ Workers (Service Conditions) Act 2019 and their own fire safety and security inspection programme administered through BEPZA's own inspection teams.

BEZA: The Newer SEZ Framework

BEZA was created to develop a new generation of economic zones with modern infrastructure, attracting larger foreign direct investment. BEZA zones include Mirsarai Economic Zone (the largest in South Asia when fully developed), Srihatta Economic Zone (Sylhet), Mongla Economic Zone, and others under various stages of development. BEZA enterprises operate under the Bangladesh Economic Zones Act and are subject to BEZA's enterprise standards for safety and security.

Why Physical Security Matters Differently in EPZ/SEZ Zones

Enterprises in EPZs and SEZs enjoy significant advantages: duty-free import of machinery and raw materials, export facilitation, repatriation of profits, and streamlined regulatory processes. In exchange, they operate under closer oversight than general industry — zone authorities have direct inspection authority over all enterprises in the zone, and poor compliance in one enterprise can affect the zone's overall reputation with international investors.

Foreign investors in BEPZA zones — particularly from Japan, Korea, Europe, and North America — typically have parent company standards that exceed BEPZA minimums. A Korean electronics manufacturer in Chittagong EPZ operates under both BEPZA requirements and its Korean parent's global security and safety standards. Meeting both requires a security system designed to the higher standard.

Perimeter Security Requirements

Zone-Level Perimeter Security

BEPZA and BEZA provide zone-level perimeter security as a zone infrastructure function — perimeter fencing, guard posts at zone entry points, and zone-wide CCTV coverage of the outer perimeter. Enterprises operating within the zone benefit from this outer security layer but cannot rely on it exclusively.

Enterprise-Level Perimeter Security

Each enterprise within the zone must maintain its own perimeter security for its individual plot, buildings, and operations. BEPZA's enterprise security requirements include:

Fencing and Boundary Demarcation — Enterprise boundaries must be clearly fenced or walled to a minimum height of 2.4 metres. Access points must be controlled. Enterprises are not permitted to have informal or unsecured openings in their boundary that bypass controlled access points.

CCTV on the Perimeter — Cameras must cover all enterprise boundary access points, the approach to all entrance gates, and the exterior of production buildings. Cameras must be positioned to capture both people and vehicle movements at access points. BEPZA inspectors have noted that camera placement that can identify a person from 10 metres is the practical standard expected.

Guard Posts — Enterprises are required to maintain security guard posts at all pedestrian and vehicle entrance gates during operating hours. After-hours security must be maintained by on-site guards or monitored electronic security (intruder alarm linked to a central monitoring station).

Employee Access Control: Biometric Requirements

Worker Entry Management

In BEPZA EPZs, worker identification and access management is a specific compliance requirement. Workers must be issued with zone identity cards (BEPZA issues its own zone identity cards for each EPZ). Enterprise access control must verify zone identity cards at point of entry.

Biometric access control — fingerprint or facial recognition turnstiles — has become the expected standard in established EPZs. BEPZA's internal guidelines strongly encourage biometric worker management to:

• Eliminate proxy attendance (one worker clocking in for another)
• Provide accurate records of who was on enterprise premises at any given time
• Support payroll accuracy by linking attendance records to payroll systems

ZKTeco biometric turnstile systems, integrated with HR and payroll software, are widely deployed in BEPZA factories and are supported by local distributors with experience in zone compliance documentation.

Visitor and Contractor Access

All visitors — including BEPZA inspectors, buyer auditors, maintenance contractors, and delivery personnel — must be registered at the enterprise's visitor management point. Registration must capture:

• Full name and national ID or passport number
• Organisation represented
• Purpose and duration of visit
• Name of the enterprise employee who authorised the visit
• Entry and exit times

BEPZA inspection teams expect to see visitor management records for the preceding 90 days during compliance inspections. Paper-based visitor registers are accepted but electronic visitor management systems (integrated with the access control platform) provide better auditability and are preferred by international parent companies.

Vehicle Access Management

All vehicles entering enterprise premises must be logged. For BEPZA enterprises involved in import and export, this is also important for customs compliance. Requirements include:

• Vehicle registration plate logging (manual or ANPR — Automatic Number Plate Recognition)
• Driver name and ID documentation
• Purpose of visit (delivery, collection, maintenance)
• Time in and time out

ANPR camera systems integrated with vehicle access barriers are increasingly deployed in larger BEPZA factories. The same ANPR data that satisfies BEPZA security requirements also supports customs documentation requirements for bonded warehouse operations.

Fire Safety Compliance in EPZs

BEPZA has its own fire safety inspection programme that operates in parallel with FSCD (Fire Service and Civil Defence). Enterprises must obtain:

1. FSCD NOC — from the national fire authority, certifying compliance with BNBC 2020 fire requirements
2. BEPZA Safety Certificate — from BEPZA's own inspection team, confirming compliance with BEPZA's enterprise safety standards

BEPZA fire safety requirements for enterprises track closely with BNBC 2020 and RSC HSE standards (for garment factories) but are enforced by BEPZA inspectors who have direct authority to suspend enterprise operations for critical safety failures. Key BEPZA fire safety requirements include:

• Addressable fire alarm systems for multi-storey factories
• Sprinkler systems for all factories above 2 floors or 1,000 square metres
• Clear egress routes with illuminated signage and emergency lighting
• Fire extinguishers of appropriate type and quantity, within inspection date
• Fire pump sets with automatic and manual start capability
• Fire safety training records for all workers (minimum annual refresher)

BEPZA Audit and Inspection Process

Annual Enterprise Inspection

BEPZA conducts annual enterprise inspections covering labour compliance, fire safety, and general security. The inspection team typically includes labour officers, fire safety officers, and a general compliance officer. Inspections are announced in advance (usually 2 weeks notice) but BEPZA retains the right to conduct unannounced supplementary inspections if a specific concern is raised.

The Inspection Scope

The annual inspection typically covers:

• Review of all valid licences and certificates (FSCD NOC, building approval, environmental clearance)
• Physical inspection of fire detection and suppression systems
• Test of fire alarm (at least one detector or call point activated to verify the control panel response)
• Verification of egress routes (inspectors walk all evacuation paths)
• Review of access control system records (who was on premises during the past 30 days)
• Review of visitor management records
• Review of CCTV system functionality (inspectors may request playback of footage from a specific date)

Common Compliance Gaps Found by Inspectors

Based on experience supporting BEPZA-zone enterprises, the most frequently cited compliance gaps are:

1. CCTV Coverage Blind Spots — Cameras installed at angles that miss the primary access point, or that are angled to watch a specific area without covering the approach. Inspectors are experienced at identifying coverage gaps. A proper survey before installation prevents this.

2. CCTV Storage Failures — NVRs or DVRs with failed hard drives, resulting in no recorded footage. This is both a compliance failure and a serious operational security gap. Monthly health checks of recording systems are essential.

3. Access Control Records Not Retained — Access log data overwritten or deleted before the required retention period. Configure your access control system to retain logs for 90 days minimum, on a server with sufficient storage.

4. Fire Alarm Detectors Covered or Disabled — Detectors covered with plastic bags or disabled because of false alarms (commonly triggered by cooking fumes or dust). Instead of disabling detectors, the correct response is to investigate and address the false alarm cause, or use detector types appropriate to the environment (e.g., heat detectors instead of smoke detectors in dusty areas).

5. Visitor Register Gaps — Incomplete entries, missing exit times, or gaps covering the periods when BEPZA inspectors themselves visited. Inspectors cross-check their own visits against the visitor register — discrepancies are an immediate red flag.

6. Expired Maintenance Certificates — Fire extinguisher inspection certificates, fire alarm annual test certificates, and sprinkler maintenance records with lapsed dates. Schedule maintenance to occur at least 60 days before inspection to allow time to resolve any issues found.

SSAL's Experience with BEPZA-Zone Factories

We have installed and maintained security and fire safety systems in factories across Chittagong EPZ, Dhaka EPZ, Comilla EPZ, and Karnaphuli EPZ. Our BEPZA-zone work includes:

• Biometric worker turnstile systems (ZKTeco) integrated with HR and payroll platforms
• CCTV systems designed to BEPZA coverage requirements, with 90-day storage
• Addressable fire alarm systems to NFPA 72, accepted by both FSCD and BEPZA inspectors
• Sprinkler systems designed to NFPA 13 for factory installations
• Annual Maintenance Contracts that maintain compliance records and certificates on a schedule that keeps factories audit-ready

We understand the specific documentation requirements of BEPZA inspections and prepare technical files that support compliance certification applications.

Get Free Consultation

Whether you are establishing a new enterprise in a BEPZA EPZ or BEZA SEZ, or reviewing compliance ahead of an upcoming inspection, we provide expert guidance and implementation support.

Get Free Consultation — contact us to discuss your zone enterprise's security and fire safety compliance requirements.