Comprehensive Review of the Personal Data Protection Act No. 9 of 2022 in Sri Lanka

Abstract

As digital transformation accelerates, safeguarding personal data has become a critical priority for governments and organizations worldwide. This research examines the Personal Data Protection Act (PDPA) No. 9 of 2022 in Sri Lanka, focusing on its implications for data security and cybersecurity. The legislation underscores the importance of addressing growing concerns related to internet privacy and data protection. It provides clear guidelines for organizations handling personal data while aligning Sri Lanka’s data privacy standards with global frameworks such as the GDPR. Although the PDPA strengthens personal data security, challenges remain in implementing its provisions and adapting to emerging technologies like AI and IoT. Key measures include updating regulations to accommodate technological advancements, enhancing public awareness, and improving the capacity of regulatory officers to ensure effective compliance.