Sri Lanka Personal Data Protection Act (No. 9 of 2022)
Part I: Processing of personal data – Sri Lanka Personal Data Protection Act (No. 9 of 2022)

Sri Lanka Personal Data Protection Act (No. 9 of 2022) s9: Section 9: Retention limited to purpose

What does s9 require?

Personal data must be held in identifiable form only as long as needed for the purpose, though it may be kept longer for public-interest archiving, research or statistics subject to section 10 safeguards.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Part I: Processing of personal data – Sri Lanka Personal Data Protection Act (No. 9 of 2022)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.