Safeguarding the Digital Future By M. Dimuthu Suranjana Feature View(s): View(s):In an era where data is the new oil, the balance between innovation and regulation has become critical. Personal Data Protection Act of Sri Lanka (PDPA)The Personal Data Protection Act, No. It aligns closely with global standards like the EU General Data Protection Regulation (GDPR) and emphasises three core objectives:1. Data Governance: The Bridge between Compliance and TrustWhile laws like the PDPA provide the regulatory foundation, data governance operationalises compliance. Under the PDPA, governance mechanisms such as Data Protection Impact Assessments (DPIAs) and Data Protection Management Programmes (DPMPs) are critical tools for compliance.

Source: Sunday Times March 01, 2026 18:18 UTC