2 Personal Data Protection Act, No. 9 of 2022 (3) All other provisions of this Act except the provisions of Part IV and Part V, shall come into operation on such date as the Minister may, appoint by Order published in the Gazette, which shall be a date not earlier than eighteen months and not later than thirty six months from the date of the certificate of the Speaker referred to in subsection (2). (4) The date of operation of the provisions of Part IV of this Act, shall be a date not earlier than twenty-four months and not later than forty-eight months from the date of certificate referred to in subsection (2). (5) The date of operation of the provisions of Part V of this Act shall be a date appointed by the Minister by Order published in the Gazette which shall be a date not later than the date appointed by the Minister under subsection (3). Application of this Act 2. (1) This Act shall apply to the processing of personal data— (a) where the processing of personal data takes place wholly or partly within Sri Lanka; or (b) where the processing of personal data is carried out by a controller or processor who– (i) is domiciled or ordinarily resident in Sri Lanka; (ii) is incorporated or established under any written law of Sri Lanka; (iii) offers goods or services to data subjects in Sri Lanka including the offering of goods or services with specific targeting of data subjects in Sri Lanka; or (iv) specifically monitors the behaviour of data subjects in Sri Lanka including profiling with the intention of making decisions in relation to the behavior of such data subjects in so far as such behaviour takes place in Sri Lanka.

اختر الفقرة المستهدفة3

الاتصال بفقرة
Connect to an entity
Disable highlights
أضف إلى جدول المحتويات