The Personal Data Protection Act, No. 9 of 2022 is comprehensive Sri Lankan legislation passed by the Parliament of Sri Lanka to regulate the processing of personal data, protect the privacy of individuals, establish rights for data subjects, and impose obligations on data controllers and processors. The Act was enacted March 9, 2022 and signed March 19, 2022, and is administered by the Data Protection Authority of Sri Lanka. It has entered into force only in parts: Part V took effect July 17, 2023, and Parts VI, VIII, IX and X took effect December 1, 2023, with the remaining parts of the Act still pending commencement.
Facts
EraSourced to the subject's own accountEnacted 2022 as Act No. 9 of 2022. 1 Promulgated BySourced to the subject's own accountParliament of Sri Lanka. 1 Jurisdiction ScopeSourced to the subject's own accountDemocratic Socialist Republic of Sri Lanka. 1 Regulatory DomainSourced to the subject's own accountProcessing of personal data; data subject rights and controller/processor obligations. 1 Classification
Legal StatusSourced to the subject's own account Era
Era (category)Sourced to the subject's own account21st Century (2000-Present) 1 Connections
Associated With
both enacted 2022-2023 as part of a South Asian wave of GDPR-style comprehensive data protection legislation
Sri Lanka's Personal Data Protection Act, No. 9 of 2022, is widely described in legal commentary as modeled on the General Data Protection Regulation.
Both are Asian national personal data protection acts.
In Legal System
Sri Lanka data protection statute, within its own mixed legal system.
Source Major Legal Systems in the World TodayRene David and John E.C. Brierley
Sources
1. Personal Data Protection Act (Sri Lanka) (Wikipedia)
WikipediaLead paragraph (era)
The Personal Data Protection Act, No. 9 of 2022 is a comprehensive data protection law enacted to regulate the processing of personal data in Sri Lanka. The Act aims to protect the privacy of individuals, establish rights for data subjects, and impose obligations on data controllers and processors.
Lead paragraph (promulgated-by)
The Personal Data Protection Act, No. 9 of 2022 is a comprehensive data protection law enacted to regulate the processing of personal data in Sri Lanka. The Act aims to protect the privacy of individuals, establish rights for data subjects, and impose obligations on data controllers and processors.
Lead paragraph (jurisdiction-scope)
The Personal Data Protection Act, No. 9 of 2022 is a comprehensive data protection law enacted to regulate the processing of personal data in Sri Lanka. The Act aims to protect the privacy of individuals, establish rights for data subjects, and impose obligations on data controllers and processors.
Lead paragraph (regulatory-domain)
The Personal Data Protection Act, No. 9 of 2022 is a comprehensive data protection law enacted to regulate the processing of personal data in Sri Lanka. The Act aims to protect the privacy of individuals, establish rights for data subjects, and impose obligations on data controllers and processors.
In Group: Data Protection Law of Asia, Africa and the Americas Outside the United States, Introduction, sentence 1
The Personal Data Protection Act, No. 9 of 2022 (abbreviated PDPA) is a comprehensive data protection law enacted to regulate the processing of personal data in Sri Lanka.
View the Source Major Legal Systems in the World Today
Rene David and John E.C. Brierley, Stevens and Sons, 1985In Legal System: Law of Sri Lanka
Reader Challenges (0)
No disputes yet. Spotted an error or a better source? Open the first one.
Sign in to dispute this or suggest a correction.