The American Chamber of Commerce in Sri Lanka (AmCham Sri Lanka) convened a distinguished group of policymakers, business leaders, and legal experts for a high-level discussion on the recently Amended Personal Data Protection Act (PDPA). The forum, held at the Taj Samudra Hotel, served as a timely platform to examine the new legislative framework and its implications for businesses navigating Sri Lanka’s accelerating digital transformation.
The event opened with a keynote address by Mr. Jayantha Fernando, who outlined the key revisions to the PDPA, emphasizing the government’s commitment to strengthening privacy rights and promoting responsible data management practices. He highlighted how the amendments bring Sri Lanka’s data protection framework closer to international standards while ensuring that organizations remain accountable for how they collect, store, and process personal data. Mr. Fernando also underscored the urgent need for both the public and private sectors to embed strong data governance cultures within their operations to enhance consumer confidence and digital trust.
A dynamic panel discussion followed, featuring distinguished industry figures, Mr. Rajeeva Bandaranaike, Ms. Shenuka Jayalath, and Mr. Suresh Emmanuel, under the moderation of Mr. Bertram Paul. The panel engaged in a deep-dive analysis of the amended Act, examining its operational, technological, and compliance dimensions. The discussion provided practical insights into how companies can interpret and implement the PDPA’s new requirements, mitigate risk, and develop compliance frameworks that balance innovation with regulatory responsibility.
Panellists also explored the broader implications of the PDPA for Sri Lanka’s investment climate and its growing role as a regional hub for digital services. Topics such as cross-border data flows, cybersecurity preparedness, and the integration of privacy-by-design principles in corporate systems were addressed, offering attendees actionable strategies to prepare for full compliance.
An interactive Q&A session enabled participants to engage directly with speakers, raising sector-specific questions and sharing industry experiences. Delegates gained clarity on key compliance timelines, the role of data protection officers, and the practical steps required to align with the new legal obligations.
In closing, AmCham Sri Lanka reaffirmed its commitment to supporting the private sector through continued advocacy and education on regulatory developments impacting business competitiveness and digital transformation. The Chamber expressed its gratitude to all speakers and participants for contributing to what proved to be a timely and solution-oriented dialogue.
As Sri Lanka advances toward a data-driven economy, the discussions underscored that compliance with the PDPA is not merely a legal obligation but a strategic imperative, one that will define organizational resilience, consumer trust, and the nation’s ability to attract sustainable digital investment.
