The enactment of the Personal Data Protection Act No. 9 of 2022 represents a watershed moment in Sri Lanka’s legal framework, marking the country’s formal recognition of data protection as a fundamental right in our increasingly digital society. As the nation embraces technological advancement and digital transformation, the need to safeguard personal information has never been more critical.
This publication, developed by the Media Law Forum Sri Lanka with the generous support of the Centre for Law and Democracy (Canada), aims to serve as an essential resource for legal practitioners, compliance officers, policymakers, academics, and other stakeholders navigating this new legislative landscape. The goal is to clarify the complexities of the PDPA and provide practical insights into its implementation and enforcement.
The PDPA draws inspiration from international best practices, particularly the European Union’s General Data Protection Regulation (GDPR), while addressing Sri Lanka’s unique socio-economic context. It establishes comprehensive protections for individuals’ personal data while creating a framework that allows for innovation and growth in the digital economy. By clarifying the rights of data subjects and the obligations of data controllers and processors, the act strikes a crucial balance between individual privacy and legitimate data use.
This booklet offers an accessible interpretation of the act’s key provisions, supplemented by relevant case examples from jurisdictions with established data protection regimes. While every effort has been made to present accurate information, this guide should be considered an educational resource rather than legal advice. The interpretation and application of the PDPA will continue to evolve through regulatory guidance, court decisions, and potential amendments to the legislation.
The Media Law Forum acknowledges the contributions of numerous legal experts, privacy advocates, and international partners who have shared their knowledge and experience in the development of this publication. Particular gratitude is extended to the Centre for Law and Democracy, primarily its Executive Director, Mr. Toby Mendal, for their continued support in strengthening media rights, information access, and now data protection frameworks in Sri Lanka.
As Sri Lanka joins the global community of nations with comprehensive data protection legislation, this booklet aims to contribute to the effective implementation of the PDPA, fostering a culture of privacy respect, digital trust, and responsible data stewardship across society.
The below links provide access to the document and translations:
Full Document – https://drive.google.com/file/d/1VuaZTB5iXqitxDoi_YhdrPGT6EZ_YQfN/view?usp=drive_link
Summary Version –
English Translation – https://drive.google.com/file/d/14_BC5cDkLtQbaAedARtDTX_4BLQqlqdP/view?usp=drive_link
Sinhala Translation – https://drive.google.com/file/d/16VG2qZ9rjrxB5FjqljDM5pZkOG6qNlDx/view?usp=drive_link
Tamil Translation – https://drive.google.com/file/d/1Mi_r2zI5ZPz-mmFhKjjDSeHspcapRKeS/view?usp=drive_link
