Sri Lanka DPA Circular 01/2026: Public Sector PDPA Readiness Begins
Sri Lanka’s Data Protection Authority has issued Circular 01/2026 directing public institutions to begin structured PDPA preparation. The move shifts data protection from legislative readiness towards practical government-wide implementation.
Sri Lanka PDPA January 2027: Core Data Protection Rules Take Effect
Sri Lanka has confirmed 1 January 2027 as the commencement date for key Personal Data Protection Act provisions. The transition offers regulatory certainty while requiring organisations to strengthen data governance, contracts, security and accountability.
Is It Legal for Shops in Sri Lanka to Demand Your Phone Number for a Receipt?
Is It Legal for Shops in Sri Lanka to Demand Your Phone Number for a Receipt? Sri Lanka personal data protection concerns are rising as more consumers question everyday retail practices that collect personal information without clear justification. Recent public discussions highlight a widespread issue: many outlets across the country insist on recording a customer’s […]
Sri Lanka’s Digital Economy in 2026: Building Public Trust Amid Rapid Growth and Everyday Risks
As Sri Lanka embraces a digital economy in 2026, ordinary citizens are increasingly relying on mobile wallets, QR payments, online banking, and platform-based commerce for daily transactions. These tools offer convenience, from quick transfers to cashless shopping, but they also expose people to new vulnerabilities. Recent discussions at the 2nd National Data Protection Symposium highlight […]