PDPA 2027: From Law to Practice

NCCSL to Host Practical Data Protection Readiness Session for Sri Lankan Businesses

As Sri Lanka prepares for the Personal Data Protection Act (PDPA) to become operational on 1st January 2027, organisations nationwide are increasingly required to move beyond understanding the legislation and begin preparing for its practical implications. In this context, the National Chamber of Commerce of Sri Lanka (NCCSL), in collaboration with the Data Protection Authority of Sri Lanka (DPA), will conduct a focused session on “PDPA 2027: From Law to Practice – Practical Readiness for Sri Lankan Businesses” on 28 October 2026 from 9.00 a.m. to 12.00 noon at the National Chamber of Commerce, Colombo 10.

The session is designed to provide businesses and professionals with a practical understanding of what implementing the PDPA means for their organisations. Rather than focusing solely on the legal provisions, the program will address the steps organisations need to consider as they prepare to translate data protection requirements into day-to-day business practices.

With personal data now forming an integral part of operations across sectors, including customer management, human resources, marketing, finance, technology and digital services, organisations need to understand how data is collected, processed, stored, shared and protected. The upcoming session will provide an opportunity to gain greater clarity on these practical considerations and identify areas that require attention ahead of the Act coming into force.

The programme will feature key representatives from the Data Protection Authority of Sri Lanka, including Mr Dimuth Bhashitha Atapattu, Director General, Ms Upekha Batuvantudave, Senior Director – Regulatory Strategy, and Mr.Anoshan Eelasingham, Senior Director – Capacity Building and Market Supervision. Their collective expertise will give participants valuable insights into the regulatory framework, organisational preparedness, and practical approaches to data protection compliance.

As the transition to stronger data protection practices gains momentum, the programme offers businesses an important opportunity to understand what needs to be done, where to begin, and what to prioritise in preparing for the new regulatory environment.

For further information and registration, participants may contact Udula at 0714034775 | [email protected], or Nishanthi at 0762555707 | [email protected] session provides a timely opportunity for Sri Lankan businesses to move from understanding the law to building practical readiness for PDPA 2027.

The post PDPA 2027: From Law to Practice appeared first on Mawratanews.lk | Sri Lanka Latest Sinhala News and Headlines.