Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Sri Lanka: ICTA releases updated version of final draft data protection bill
The Information and Communication Technology Agency of Sri Lanka ('ICTA') released, on 5 September 2021, another final draft version of the Act to Provide for the Regulation of Processing of Personal Data, further to the version released in March 2020, which has now been submitted to the Cabinet of Ministers. In particular, the ICTA highlighted that the legislation is intended to balance the interests of enterprises who rely on personal data processing with the interests of individuals whose personal data is being processed to ensure transparency, in addition to accountability in processing activities.
Furthermore, the ICTA noted that several obligations have been imposed by this legislation on those who act as data controllers and processors, and a whole new set of statutory rights were given to data subjects under this new legislation. Moreover, the ICTA added that provisions have been introduced to enable the Data Protection Authority to issue directives on entities which do not adhere to the provisions of the new legislation and administrative penalties are imposed only on those who do not comply with the said directives. Further to this, the ICTA clarified that the provisions on penalties are subject to a threshold, instead of fines calculated on the global turnover of the controllers.
You can read the press release here and the updated final draft here.