1 privacy and data protection regulation that apply in Sri Lanka
Sri Lanka was the first South Asian country to pass comprehensive privacy legislation in 2022. However, core enforcement provisions were delayed — the March 2025 enforcement date was repealed just four days before taking effect, creating uncertainty about the practical timeline. The DPA was appointed in early 2024.
