Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Sri Lanka: ICTA releases updated version of final draft data protection bill

The Information and Communication Technology Agency of Sri Lanka ('ICTA') released, on 5 September 2021, another final draft version of the Act to Provide for the Regulation of Processing of Personal Data, further to the version released in March 2020, which has now been submitted to the Cabinet of Ministers. In particular, the ICTA highlighted that the legislation is intended to balance the interests of enterprises who rely on personal data processing with the interests of individuals whose personal data is being processed to ensure transparency, in addition to accountability in processing activities.

Furthermore, the ICTA noted that several obligations have been imposed by this legislation on those who act as data controllers and processors, and a whole new set of statutory rights were given to data subjects under this new legislation. Moreover, the ICTA added that provisions have been introduced to enable the Data Protection Authority to issue directives on entities which do not adhere to the provisions of the new legislation and administrative penalties are imposed only on those who do not comply with the said directives. Further to this, the ICTA clarified that the provisions on penalties are subject to a threshold, instead of fines calculated on the global turnover of the controllers.

You can read the press release here and the updated final draft here.

Feedback