Download the Personal Data Protection Act, No. 9 of 2022
| Data Protection Act SL | |||||||||
Gazettes related to Personal Data Protection
| Description | Actions | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| 07/21/2024 - Gazettes related to Personal Data Protection | |||||||||
| 08/01/2024 - Gazettes related to Personal Data Protection | |||||||||
| 14/03/2025 – Extraordinary Gazette No. 2427/34 related to Personal Data Protection | |||||||||
Media Release
| Description | Actions | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Data Protection Authority Extends Deadline for Public Feedback on all Draft Regulations 29th Oct 2024 | |||||||||
| Cabinet Endorses PDPA Amendments to Strengthen Stakeholder Alignment and Regulatory Capacity Prior to Enforcement 24 February 2025 | |||||||||
Circulars and Guidelines
| Description | Actions | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Circular No. 01/2024 - Application of the PDPA in public sector & introduction to DPA - 13th September 2024 | |||||||||
Guidelines on Personal Data Protection Management Program
| Guideline version 1 for public consultation | |||||||||
| Feedback Form | |||||||||
Draft Directive on Classification of Categories of Personal Data for Public Authorities under Section 26(1) of the PDPA
| DPA - Classification of Data Categories Directive - 13-09-2024- for Public Consultations | |||||||||
| Feedback Form | |||||||||
Draft Regulations on Personal Data Protection Impact Assessments under the Personal Data Protection Act No. 9 of 2022
| DPA - Personal Data Protection Impact Assessments for Public Consultation: 01-10-2024 | |||||||||
| Feedback Form | |||||||||
Draft Rules on Personal Data Breach Notifications under the Personal Data Protection Act No. 9 of 2022
| DPA - Draft Rules on Personal Data Breach Notifications for Public Consultation: 01-10-2024 | |||||||||
| Feedback Form | |||||||||
Draft Directive on Specification of Instruments for Processing of Personal Data Outside Sri Lanka under Section 26(4) of the Personal Data Protection Act No. 9 of 2022
| DPA - Specification of Instruments for Processing of Personal Data Outside Sri Lanka for public consultation: 02-10-2024 | |||||||||
| Feedback Form | |||||||||
Draft Regulations on the Appointment of the Data Protection Officer under Section 20 of the Personal Data Protection Act No. 9 of 2022
| DPA - Draft Regulations on the Appointment of the Data Protection Officer under Section 20 of the Personal Data Protection Act No. 9 of 2022 (03-10-2024) | |||||||||
| Feedback Form | |||||||||
Draft Regulations on the Exercise of Data Subjects’ Rights and Appeals under the Personal Data Protection Act No. 9 of 2022
| DPA - Draft Regulations on the Exercise of Data Subjects’ Rights and Appeals under the Personal Data Protection Act No. 9 of 2022: 05-10-2024 | |||||||||
| Feedback Form | |||||||||
Draft Regulations on Inquiry Procedure under Section 35 of the Personal Data Protection Act No.9 of 2022
| DPA - Draft Regulations on Inquiry Procedure under Section 35 of the Personal Data Protection Act No.9 of 2022 : 05-10-2024 | |||||||||
| Feedback Form | |||||||||
Draft Regulation on Fees Applicable for Exercising Rights of Data Subjects
| DPA - Draft Regulation on Fees Applicable for Exercising Rights of Data Subjects: 12-10-2024 | |||||||||
| Feedback Form | |||||||||