2
Personal Data Protection Act, No. 9 of 2022
(3) All other provisions of this Act except the provisions
of Part IV and Part V, shall come into operation on such date
as the Minister may, appoint by Order published in the
Gazette, which shall be a date not earlier than eighteen
months and not later than thirty six months from the date of
the certificate of the Speaker referred to in subsection (2).
(4) The date of operation of the provisions of Part IV of
this Act, shall be a date not earlier than twenty-four months
and not later than forty-eight months from the date of
certificate referred to in subsection (2).
(5) The date of operation of the provisions of Part V of
this Act shall be a date appointed by the Minister by Order
published in the Gazette which shall be a date not later than
the date appointed by the Minister under subsection (3).
Application of
this Act
2. (1) This Act shall apply to the processing of personal
data—
(a) where the processing of personal data takes place
wholly or partly within Sri Lanka; or
(b) where the processing of personal data is carried out
by a controller or processor who–
(i) is domiciled or ordinarily resident in
Sri Lanka;
(ii) is incorporated or established under any
written law of Sri Lanka;
(iii) offers goods or services to data subjects in
Sri Lanka including the offering of goods or
services with specific targeting of data
subjects in Sri Lanka; or
(iv) specifically monitors the behaviour of data
subjects in Sri Lanka including profiling with
the intention of making decisions in relation
to the behavior of such data subjects in so far
as such behaviour takes place in Sri Lanka.
اختر الفقرة المستهدفة3
الاتصال بفقرة
Connect to an entity
Disable highlights
أضف إلى جدول المحتويات