Sri Lanka DPA Circular 01/2026: Public Sector PDPA Readiness Begins
Sri Lanka’s Data Protection Authority has issued Circular 01/2026 directing public institutions to begin structured PDPA preparation. The move shifts data protection from legislative readiness towards practical government-wide implementation.
Sri Lanka PDPA January 2027: Core Data Protection Rules Take Effect
Sri Lanka has confirmed 1 January 2027 as the commencement date for key Personal Data Protection Act provisions. The transition offers regulatory certainty while requiring organisations to strengthen data governance, contracts, security and accountability.