Personal Data Protection Act 2022 · As enacted · Part IX · Miscellaneous
52. Rules
Official English translation. Where it differs from the Sinhala or Tamil text, the Act itself says which text prevails.
Official translationFrom Department of Government Printing, unchanged
The Authority shall make rules in respect of–
the schemes of recruitments, terms of appointment, employment and dismissal of various officers and employees and their powers, functions including the powers and functions of the Director-General and the payment of remuneration;
the procedure to be observed at the summoning and holding of meetings of the
Authority;
the management of the affairs of the
Authority;
the form and manner of exercising rights of data subjects under Part II;
criteria for refusal of the request of data subjects under section 17.
all matters for which, rules are required or authorized to be made under this Act.
The Authority shall make first rules under subsection (1), within twenty-four months from the date of coming into operation of the provisions of Part V of this Act.
The Authority shall, prior to making rules under paragraphs (d), (e) or (f) of subsection (1), hold public consultations for a period of not less than two weeks.
The period of public consultation referred to in subsection (3) may be extended for a further period as may be specified by the Authority.
A rule made under this section shall not have effect until it is approved by the Minister and approved rules and notification of such approval are published in the Gazette.
Every rule made under paragraphs (d), (e) or (f) of subsection (1), shall within three months after its publication in the Gazette be brought before Parliament for approval and any rule, which is not so approved, shall be deemed to be rescinded with effect from the date of such disapproval, but without prejudice to anything previously done thereunder.
Notification of the date on which any rule made by the Authority is deemed to be rescinded shall be published in the Gazette.
Part X