The Cabinet of Ministers has approved a Memorandum from the President, as the Minister of Digital Economy, to amend the Personal Data Protection Act No. 9 of 2022.
Issuing a statement, the Acting Secretary to the Ministry of Digital Economy, Waruna Sri Dhanapala said the approval was granted last week (19 Feb), making it the first-ever legislation of its kind in South Asia.
He further said that therefore, the original enforcement date, set for 18 March 2025, as per Extraordinary Gazette No. 2366/08 issued on 8th January 2024, would be required to be amended to grant additional time for enforcement of this Act in state entities.
Waruna Sri Dhanapala added that after due consideration, the Cabinet has proposed an extension of six (06) months to the enforcement date, allowing more time to fully integrate the proposed amendments and ensure that all stakeholders are aligned and well-prepared.
He further noted that recognizing the importance of having a future-ready enforcement regime, which will equally support both public and private sector adoption of digital strategies, and considering the necessity to support the establishment of a fully-fledged Regulator with the capacity to meaningfully address the rights of data subjects, Cabinet approval was obtained before the Personal Data Protection Act is brought into operation.
As the first-ever legislation of its kind in South Asia, the Act is a pivotal step in safeguarding citizens’ rights while being an enabler to facilitate growth and innovation in the digital economy. The amendments are designed to strengthen this landmark law, ensuring that it can be fully operationalized and embraced with greater technology choices, across all sectors of society.
The proposed amendments incorporate concerns as well as valuable feedback from the Government sector, private sector, and other key stakeholders in response to the Draft Rules, Draft Regulations, Draft Directives and Draft Guidelines published by the Data Protection Authority (DPA).
Waruna Sri Dhanapala pointed out that many stakeholders, especially from the public sector, have expressed the need for additional time to enhance their human and technical infrastructure, enabling them to fully comply with the enforcement provisions of the Act. Some public sector institutions have suggested amendments to the Act, particularly to provide the public sector with more flexibility in making technology choices, similar to the private sector, to enable the adoption of AI Systems etc.
Considering that this law would apply to the Central Government as well as Provincial Councils, Local Authorities, Divisional Secretariats and Grama Niladhari level alike, the Government is cognizant of the need to create more capacity and therefore the need to provide additional time to ensure compliance.
The proposed amendments to the PDPA approved by the Cabinet of Ministers would enable a change to the date of operation of the enforcement provisions in the Act.
Other amendments, including Sections 17, 19, 20, 24, 26, 27, 53, and 56, drafted by the Ministry of Digital Economy in consultation with DPA and the Legal Draftsman’s Department, have also been approved by the Cabinet.
The Acting Secretary to the Ministry of Digital Economy said the government is now in the process of submitting these amendments to Parliament for approval and the Ministry of Digital Economy will publish the Amendments on its website shortly. (Newswire)