Sri Lanka PDPA January 2027: Core Data Protection Rules Take Effect
Sri Lanka has confirmed 1 January 2027 as the commencement date for key Personal Data Protection Act provisions. The transition offers regulatory certainty while requiring organisations to strengthen data governance, contracts, security and accountability.