Data Protection Authority of Sri Lanka
DPA (LK)
Sri Lanka
Sri LankaSri Lanka's data protection authority, established under the PDPA in August 2023.
- Jurisdiction (head office)
- Sri Lanka
- Scope covered
- Sri Lanka
- Type
- Data protection authority
- GRC discipline
- Data protection & privacy
- Statutory / official basis
- Personal Data Protection Act No. 9 of 2022, as amended by Act No. 22 of 2025
- Status
- Current — verified June 2026
Substantive/enforcement provisions delayed (Amendment Act No. 22 of 2025); full effect expected 2026 — no Minister's commencement order yet.
This is a curated reference entry maintained by VulaPri, verified against official sources. Spotted something out of date? Tell us →