Skip to content

Sri Lanka Personal Data Protection Act (No. 9 of 2022) Readiness Advisory

A strategy call with someone who has spent 25 years building compliance systems used by 100,000+ professionals in 160+ countries – not a generalist who read the standard last week.

16
Controls
6
Domains
179
Mapped Frameworks
Sri Lanka
Jurisdiction

Why work with Ivanka on Sri Lanka Personal Data Protection Act (No. 9 of 2022)

The Sri Lanka Personal Data Protection Act No. 9 of 2022 establishes a comprehensive data protection framework for Sri Lanka. It creates the Data Protection Authority of Sri Lanka, establishes data processing principles, individual rights, and obligations for controllers and processors. Applies to processing of personal data of individuals in Sri Lanka. Implementation phased over 18 months from commencement.

Most consultants approach Sri Lanka Personal Data Protection Act (No. 9 of 2022) as a checkbox exercise. Ivanka approaches it as a strategic lever. With 25 years of building The Art of Service – a compliance platform now covering 692 frameworks and 819,000+ cross-framework mappings – she doesn't just understand the standard. She understands how it connects to everything else your organisation is already doing.

This matters because Sri Lanka Personal Data Protection Act (No. 9 of 2022) doesn't exist in isolation. Ivanka will map your current compliance posture against the 16 controls across 6 domains, identify gaps, and show you where existing controls from other frameworks you may already follow can be leveraged – saving months of redundant work.

Relevant credentials

  • Built and operated a data-intensive business across 160+ countries, navigating privacy regulations firsthand
  • MIT Entrepreneurial Masters graduate – rigorous analytical approach to enterprise challenges
  • EXIN Expert Panel member – helping shape global certification standards

What you get in 30 minutes

Gap Assessment Review

Ivanka reviews your Sri Lanka Personal Data Protection Act (No. 9 of 2022) readiness scores and identifies the critical gaps that carry the highest risk. No generic advice – specific to your domains and controls.

Implementation Roadmap

A clear, prioritised plan for addressing gaps across 6 domains. She maps what you can leverage from existing compliance work and what requires new investment.

Cross-Framework Strategy

Sri Lanka Personal Data Protection Act (No. 9 of 2022) maps to 179 other frameworks. Ivanka shows you where a single control implementation can satisfy multiple regulatory requirements at once.

Domains covered in Sri Lanka Personal Data Protection Act (No. 9 of 2022)

01Exemptions and Penalties
02Part V — Data Protection Authority
03Part IV — Direct Marketing
04Part III — Controller and Processor Responsibilities
05Part II — Rights of Data Subjects

Plus 1 additional domains. See the full assessment →

This is for you if

  • You need to achieve Sri Lanka Personal Data Protection Act (No. 9 of 2022) compliance but don’t know where to start or how to prioritise
  • You’ve been told you’re “compliant” but suspect gaps exist that haven’t been properly assessed
  • You manage compliance for organisations across every sector and need expert guidance, not generic templates
  • You want to leverage existing compliance efforts across multiple frameworks rather than starting from scratch
  • You need a strategic plan your leadership team and board will actually understand and support

Start with a free assessment. Then let's talk strategy.

Take the free Sri Lanka Personal Data Protection Act (No. 9 of 2022) readiness diagnostic. In 5 minutes you'll have a clear picture of where your gaps are. Then book the strategy call and Ivanka will show you exactly how to close them.

Start your free Sri Lanka Personal Data Protection Act (No. 9 of 2022) assessment

Free · No login required · Results in 5 minutes

Or go directly to the $149 Report + Strategy Call