Sri Lanka PDPA January 2027: Core Data Protection Rules Take Effect

Sri Lanka has confirmed 1 January 2027 as the commencement date for key Personal Data Protection Act provisions. The transition offers regulatory certainty while requiring organisations to strengthen data governance, contracts, security and accountability.
Is It Legal for Shops in Sri Lanka to Demand Your Phone Number for a Receipt?

Is It Legal for Shops in Sri Lanka to Demand Your Phone Number for a Receipt? Sri Lanka personal data protection concerns are rising as more consumers question everyday retail practices that collect personal information without clear justification. Recent public discussions highlight a widespread issue: many outlets across the country insist on recording a customer’s […]