Sri Lanka Personal Data Protection Act (No. 9 of 2022)
Part III: Controllers and processors – Sri Lanka Personal Data Protection Act (No. 9 of 2022)

Sri Lanka Personal Data Protection Act (No. 9 of 2022) s20-5: Section 20(5) as amended 2025: DPO responsibilities

What does s20-5 require?

The DPO advises the controller or processor and staff on obligations under the Act and other law, advises how to comply with the Act, facilitates staff capacity building, advises on impact assessments, and cooperates with and follows the Authority's directives on personal data protection.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Part III: Controllers and processors – Sri Lanka Personal Data Protection Act (No. 9 of 2022)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.