Personal Data Protection Act 2022 · As enacted · Part V · Data Protection Authority
29. Constitution of the Board of Directors
Official English translation. Where it differs from the Sinhala or Tamil text, the Act itself says which text prevails.
Official translationFrom Department of Government Printing, unchanged
The administration, management and control of the affairs of the Authority shall be vested in a Board of
Directors (in this Act referred to as the “Board”).
The Board shall, for the purpose of administering the affairs of the Authority, exercise, perform and discharge the powers, duties and functions conferred on, assigned to or imposed on, the Authority by this Act.
The Board shall consist of not less than five members and not more than seven members appointed by the President from among persons who have reached eminence and proven professional expertise in the fields of engineering, medicine, banking and finance, telecommunications, Law and persons who have experience in different sectors such as public utilities, business process outsourcing (BPO), logistics,
Insurance, banking and financial sectors, of whom at least two members shall have prior experience in the public sector entities.
The persons appointed to the Board shall also have experience and knowledge in regulatory matters, privacy and data protection, information security, data science, data analytics, economics, finance, information technology or related fields.
The provisions of Schedule VI to this Act, shall have effect in relation to the disqualifications and grounds for removal, resignation, leave or absence, and term of office of members of the Board and meetings, and seal of the
Authority.
Part VI
Director-General and the Staff of the Authority
Part VII
Penalties
Part VIII
Fund of the Authority
Part IX
Miscellaneous
Part X