Sri Lanka: Final version of the draft data protection bill released
The Information and Communication Technology Agency of Sri Lanka ('ICTA') announced, on 3 March 2020, that the Legal Draftsman's Department has released a final draft version of the Act to Provide for the Regulation of Processing of Personal Data (2019), following a series of consultations with various stakeholders and government bodies. In particular, the ICTA noted that several changes had been made to the provisions of the draft act, including the rearrangement of key provisions. More specifically, the ICTA outlined that amendments and clarifications had been made to, among other things, the accountability mechanisms, the right to appeal against decisions by the Data Protection Authority, and the requirements regarding Data Protection Impact Assessment.
Finally, the ICTA confirmed that the final draft is now awaiting final approval and, thereafter, will be submitted to the Cabinet of Ministers and published as a bill, at which point further amendments may be made.