Sri Lanka DPA Circular 01/2026: Public Sector PDPA Readiness Begins

Sri Lanka’s Data Protection Authority has issued Circular 01/2026 directing public institutions to begin structured PDPA preparation. The move shifts data protection from legislative readiness towards practical government-wide implementation.
Sri Lanka PDPA January 2027: Core Data Protection Rules Take Effect

Sri Lanka has confirmed 1 January 2027 as the commencement date for key Personal Data Protection Act provisions. The transition offers regulatory certainty while requiring organisations to strengthen data governance, contracts, security and accountability.
Sri Lanka’s Digital Economy in 2026: Building Public Trust Amid Rapid Growth and Everyday Risks

As Sri Lanka embraces a digital economy in 2026, ordinary citizens are increasingly relying on mobile wallets, QR payments, online banking, and platform-based commerce for daily transactions. These tools offer convenience, from quick transfers to cashless shopping, but they also expose people to new vulnerabilities. Recent discussions at the 2nd National Data Protection Symposium highlight […]