FOR ORGANIZATIONS
◫Build a defensible compliance programme.
Assess your readiness, identify material gaps, and move from policy to operational controls with a clear implementation plan.
SRI LANKA PERSONAL DATA PROTECTION ACT
Data protection,made practical.
Clear, Sri Lanka-focused resources for organizations, institutions, and citizens preparing for the Personal Data Protection Act.
Sri Lanka focusedPractical resourcesExpert-led guidance
ENFORCEMENT READINESS
The 2027 milestone
Use the time ahead to establish governance, map data, close control gaps, and make privacy part of how your organization operates.
00
Days
00
Hours
00
Minutes
00
Seconds
Target date: 1 January 2027
A CLEARER PATH TO COMPLIANCE
PDPA.COM.LK turns complex data-protection obligations into useful decisions, practical actions, and credible evidence of progress.
WHO WE HELP
Built for every role in the privacy ecosystem.
FOR CITIZENS
◎Understand and exercise your data rights.
Find plain-language guidance on access, correction, deletion, objections, and responsible handling of your personal information.
FOR INSTITUTIONS
▦Deliver accountable public-sector data practices.
Use structured guidance for governance, data sharing, retention, transparency, and institutional accountability.
THE PDPA, IN CONTEXT
Privacy is a management discipline.
Strong compliance connects legal obligations with people, processes, technology, and accountability. Start with what data you hold, why you use it, and who is responsible.
Read the playbook01
Governance
Clear accountability, leadership sponsorship, and a responsible privacy owner.
02
Data intelligence
A reliable view of data assets, flows, purposes, and third-party handling.
03
Controls
Security, retention, consent, and rights processes that work in practice.
04
Assurance
Training, testing, audits, and continuous improvement to sustain progress.
FOR CITIZENS
Know Your Data Protection Rights
The PDPA gives you powerful rights over your personal information. Here's what you need to know.
🔍
Right to Access
Ask organizations what data they hold about you and get a copy
✏️
Right to Correction
Request correction of inaccurate or incomplete data
🗑️
Right to Deletion
Request deletion of your data in certain circumstances
🚫
Right to Object
Object to processing of your data for specific purposes
WHY USE PDPA.COM.LK?
Comprehensive, practical, and free resources
Everything you need to navigate PDPA compliance effectively.
🎯
Free Assessment
Comprehensive 30-question assessment with Big 4-quality executive report
📚
Practical Resources
Templates, checklists, and guides you can actually use
👨💼
Expert Support
Access to experienced cybersecurity and privacy professionals
🇱🇰
Sri Lanka Focused
Tailored to Sri Lankan context, regulations, and business environment
📊
Industry Benchmarks
Compare your maturity against reference standards
🔒
ISO Aligned
Aligned with ISO 27001/27701 for integrated compliance
START HERE
Resources designed to move work forward.
IMPLEMENTATION GUIDE
01PDPA Implementation Playbook
A practical seven-phase route from governance and data mapping through controls, training, and assurance.
Open resource
INTERACTIVE TOOL
02Compliance Checklist
Use a structured obligation tracker to monitor readiness and focus your remediation effort.
Open resource
READY-TO-USE TEMPLATES
03Privacy & Data Management Templates
Start with essential resources for privacy notices, data inventories, vendor agreements, and breach response.
Open resource
COMPLIANCE JOURNEY
Key Compliance Deadlines
1
PDPA Enacted
May 2022
2
Phased Implementation
2024-2027
3
Full Enforcement
January 2027
YOUR NEXT STEP
Know where you stand before the deadline gets closer.
Take a structured assessment and receive a clear starting point for your PDPA compliance journey.