Skip to content
srilawsby aturio
As enacted
Contents

Part I · Processing of Personal Data

10. Obligation to maintain Integrity and confidentiality

Official English translation. Where it differs from the Sinhala or Tamil text, the Act itself says which text prevails.

Every controller shall ensure integrity and confidentiality of personal data that is being processed, by using appropriate technical and organizational measures including encryption, pseudonymisation, anonymisation or access controls or such other measures as may be prescribed so as to prevent the –

(a)

unauthorized or unlawful processing of personal data; or

(b)

loss, destruction or damage of personal data.

Read on from s 11

Part II

Rights of Data Subjects

Read on from Part II

Part III

Controllers and Processors

Read on from Part III

Part IV

Use of Personal Data to Disseminate Solicited Messages

Read on from Part IV

Part V

Data Protection Authority

Read on from Part V

Part VI

Director-General and the Staff of the Authority

Read on from Part VI

Part VII

Penalties

Read on from Part VII

Part VIII

Fund of the Authority

Read on from Part VIII

Part IX

Miscellaneous

Read on from Part IX

Part X

Interpretation

Read on from Part X

Schedules