7. Amendment of section 20 of the principal enactment

Official English translation. Where it differs from the Sinhala or Tamil text, the Act itself says which text prevails.

Section 20 of the principal enactment is hereby amended as follows:-

(1)

in subsection (1) thereof-

(a)

in paragraph (a) thereof, by the substitution for the words “by a ministry, government department or public corporation,”

of the words “by a Ministry or government department,”; and

(b)

by the repeal of subparagraph (iii) of paragraph (b) thereof and the substitution therefor of the following subparagraph:-

“(iii) categories of processing which results in a risk of harm affecting the rights of the data subjects protected under this Act, based on the nature of processing and its impact on the data subjects, as may be determined by the Authority by way of guidelines made under this

Act.”; and

(2)

in subsection (5) thereof-

(a)

in paragraph (a) thereof, by the substitution for the words “processing requirements provided under this Act or any other written law;” of the words “processing obligations or requirements, as the case may be, under this

Act or any other written law;”;

(b)

by the repeal of paragraph (b) thereof and the substitution therefor of the following paragraph: -

“(b) advise the controller or processor on how to comply with the provisions of this Act;”; and

(c)

in paragraph (e) thereof, by the substitution for the words “data protection.” of the words

“personal data protection.”.

Read on from s 8