Sri Lanka now has its own policy on personal data governance, and it’s now officially in effect.

What is a Data Protection Act?

Data Protection Act helps you control how your personal information is used by organizations, businesses, or the government. Everyone responsible for using personal data has to follow strict rules called data protection principles.

Data protection rules aim to reduce the possibility of data stored in computerized databases being misused in many forms. Since the General Data Protection Regulation (GDPR), a European legal instrument with the extra-territorial application, took effect in May 2018, there has been a worldwide rise in interest in data protection.

Many in the commercial sector, particularly those in the business process outsourcing (BPO) industry, have advocated for GDPR-style legislation in order to improve their business prospects by ensuring that the country passes the adequacy test. Non-European jurisdictions must receive this certification in order for their businesses to be allowed to operate with EU-sourced data.

Why Data Protection Acts?

Data protection is regarded as an esoteric topic, although it has significant implications in the expanding digital economy. Depending on how successful digitalization initiatives are, almost any firm could be subject to data protection regulations.

What about Sri Lankan Personal Data Protection Act?

Privacy is one of the biggest problems in this new electronic age for countries. Therefore Sri Lanka is also aiming to reduce the possibility of data stored in computerized databases being misused in many forms.

Here’s the latest personal data protection act published by documents.gov.lk

Further information can be found via icta.lk or by reaching out to Sri Lankan Government Information Center by dialing 1919