Arjuna Herath
Chairman

"Sri Lanka is on an exciting journey of digital transformation, aspiring to join the ranks of developed nations. As we harness the power of digital technologies to drive economic growth and create new opportunities, it is essential to address the associated risks, including data security and privacy concerns.

To safeguard our citizens' personal data rights, the Personal Data Protection Act No. 9 of 2022 (PDPA) was enacted. This pioneering legislation in South Asia ensures that personal data is handled with integrity and security, laying the foundation for earning consumer trust and safeguarding privacy in a trustworthy digital economy. The Data Protection Authority (DPA), established under the PDPA, is committed to enforcing these regulations, protecting privacy, and fostering innovation.

Our mission is to regulate personal data processing, protect individual privacy, and support the growth of a vibrant digital economy. We aim to create an environment where businesses can thrive while ensuring citizens' rights are safeguarded.

As we move forward, the DPA is dedicated to building public trust, enhancing international data partnerships, and contributing to Sri Lanka’s sustainable digital development. Together, we can create a secure and prosperous digital future for all."