Guidelines on Data Protection Management Program available for Public consultation

The Data Protection Authority (DPA) announced that the draft outline of guidelines on Data Protection Management Program (DPMP) intended to be issued under section 12 (2) of the Personal Data Protection Act No.9 of 2022 (PDPA) is now available for public consultation.

This significant step aims to ensure that the guidelines are comprehensive, effective and reflective of the needs and concerns of all stakeholders.

Section 2 of the draft guidelines summarizes the key obligations of a controller under the Act and Section 3 describes the internal controls and procedures that would enable a controller to comply with the said obligations. The draft guidelines are intended to guide controllers as they devise their internal policy frameworks to meet the accountability requirements under Section 12 of the PDPA by its enforcement date of 18th March 2025.

“We invite all stakeholders, the public, as well as organizations, to review the draft regulations and provide their valuable feedback. Your insights and observations are crucial in shaping a robust and effective framework to facilitate the effective implementation of the DPA,” said Director General (Actg.), Data Protection Authority Waruna Sri Dhanapala.

“The consultation period is open until October 15, 2024 and we encourage the public to take this opportunity to contribute to the development of these important guidelines. Your participation will help ensure that the final regulations are well-informed and balanced, addressing the diverse perspectives and needs of all stakeholders.

More information on how to submit feedback can be obtained from [email protected] and further information from Acting Director General at [email protected].

Source:Daily News