Knowledge Base
Other·Statute·10/18/2026

Sri Lanka Personal Data Protection Act, No. 9 of 2022

Act 9/2022 establishes processing principles, individual rights, automated-decision review, security, breach notification, DPIAs, transfers and the Data Protection Authority. Read with Amendment Act 22/2025: the original commencement schedule and transfer text are not the amended framework.

Prepared byShubhank Suman
Source: Original Act certified 19 March 2022; read with Act 22/2025
sri-lankadata-protectionautomated-decisionsinternational-transfersimpact-assessmentdpo

Inline PDF preview is not supported in this browser. Open the PDF instead.

Get new templates by email

A short, useful update whenever a new privacy template guide, knowledge-base resource or guide is published. No spam. Unsubscribe anytime.

Related instruments in this library