Skip to content
srilawsby aturio
As enacted
Contents

Part II · Rights of Data Subjects

16. Right to erasure

Official English translation. Where it differs from the Sinhala or Tamil text, the Act itself says which text prevails.

Every data subject shall have the right to make a written request to the controller to have his personal data erased, under the following circumstances where–

(a)

the processing of personal data is carried out in contravention of the obligations referred to in sections 5,6,7,8,9,10 and 11;

(b)

the data subject withdraws his consent upon which the processing is based, in accordance with item (a)

of Schedule I or item (a) of Schedule II;

(c)

the requirement to erase personal data is required by any written law or on an order of a competent court to which the data subject or controller is subject to.

Read on from s 17

Part III

Controllers and Processors

Read on from Part III

Part IV

Use of Personal Data to Disseminate Solicited Messages

Read on from Part IV

Part V

Data Protection Authority

Read on from Part V

Part VI

Director-General and the Staff of the Authority

Read on from Part VI

Part VII

Penalties

Read on from Part VII

Part VIII

Fund of the Authority

Read on from Part VIII

Part IX

Miscellaneous

Read on from Part IX

Part X

Interpretation

Read on from Part X

Schedules