Working Draft on the Guidelines Concerning the Data Protection Management Program Available for Public Consultation


The draft guidelines have been formulated to guide controllers as they devise their internal policy frameworks to meet the accountability requirements under the PDPA by its enforcement date of 18th March 2025.


We invite all members of the public, as well as organizations, to review the draft regulations and provide their valuable feedback. Your insights and observations are crucial in shaping a robust and effective privacy framework that benefits everyone.

How to Submit Your Feedback:

  • Step 1: Visit our official website at www.dpa.gov.lk to access the working draft of the guidelines and the feedback template.
  • Step 2: Send your observations and suggestions using in the template provided to info@dpa.gov.lk.

The consultation period is open until 15-10-2024. We encourage you to take this opportunity to contribute to the development of these important guidelines. Your participation will help ensure that the final regulations are well-informed and balanced, addressing the diverse perspectives and needs of all stakeholders.

For further information, please contact: Actg. Director General at dg@dpa.gov.lk.

Thank you for your engagement and support in this vital process.

Data Protection Authority of Sri Lanka

Guideline version 1 for public consultation
Feedback From