Skip to content
As enacted
Contents

Part I · Processing of Personal Data

4. Compliance with the data protection obligations

Official English translation. Where it differs from the Sinhala or Tamil text, the Act itself says which text prevails.

Every controller shall process personal data in compliance with the obligations specified under this Act.

Part II

Rights of Data Subjects

Part III

Controllers and Processors

Part IV

Use of Personal Data to Disseminate Solicited Messages

Part V

Data Protection Authority

Part VI

Director-General and the Staff of the Authority

Part VII

Penalties

Part VIII

Fund of the Authority

Part IX

Miscellaneous

Part X

Interpretation

Schedules