Sri Lanka's
Data Privacy & Protection Summit
Organized by CICRA, bringing together regulators, legal experts, and industry leaders each year to advance PDPA compliance, executive governance, and enterprise data security in Sri Lanka.
Explore Our Previous Summits
Browse the recap, photo gallery, and full speaker lineup from each edition of the summit.
Sessions Our Summits Have Covered
Each edition brings keynote speakers, panelists, and regulators together for focused sessions on the state of data protection in Sri Lanka.
Sleeping Data, Living Risks
Protecting What Your Organisation Stores in the Dark
Protecting Crown Jewels
Is AI Breaking Data Security or Fixing It?
Fulfilling Data Subject Requests
A Company's Legal Obligation and Operational Challenges Under PDPA
Before the Breach
Why a Data Protection Impact Assessment (DPIA) Saves You from Disaster
Navigating Sri Lanka's Data Governance Frontier
What is the CICRA Data Privacy Summit?
The CICRA Data Privacy & Protection Summit is Sri Lanka's premier national forum, bringing together state authorities, top corporate executives, legal scholars, and leading cybersecurity professionals.
As the country moves rapidly towards digitalization, safeguarding personal information becomes critical. This summit serves as the bridge between technical execution and legal compliance, providing organizational leaders with the strategies required to defend and govern corporate assets responsibly.
Sri Lanka PDPA No. 9 of 2022
With the progressive implementation of Sri Lanka's landmark Personal Data Protection Act, compliance is no longer optional—it is a critical executive mandate.
*Failure to comply with the PDPA provisions may result in severe administrative penalties, making early strategic adoption vital for sustained operations.
Essential Summit Curriculum & Panels
PDPA Regulatory & Legal Framework
A deep dive into the legal landscape, clarifying data subject rights, processing limits, cross-border transfers, and the statutory powers of the newly formed Data Protection Authority of Sri Lanka.
Implementing PDPA in Organizations
Operationalizing the law: how to set up Data Protection Management Programmes (DPMP), run privacy impact assessments, execute consent logs, and integrate privacy-by-design into existing IT frameworks.
Role of a Data Protection Officer (DPO)
Understanding DPO criteria (large-scale monitoring, processing special data), their dual role in advising the board and acting as the official liaison to the national authority, and qualifications.
Risk, Compliance & Governance
Strategic risk management under compliance standards. Assessing liabilities, establishing incident response plans, notifying authorities of breaches, and aligning governance with global norms (GDPR, ISO 27001).
Why Attend the Data Privacy Summit?
Learn from Industry Experts
Gain direct advice from legal authorities, state regulators, cybersecurity consultants, and seasoned practitioners who are actively shaping Sri Lanka's data protection landscapes.
Network with Legal & Compliance Professionals
Connect with like-minded DPOs, General Counsel, compliance officers, and CIOs across major industries, fostering critical B2B partnerships and compliance peer groups.
Protect Organizational Data Responsibly
Equip your business with the blueprints to defend customer trust, implement standard security frameworks, prevent reputational damage, and shield against liability.
Designed for Strategic Leaders & Compliance Gatekeepers
Data privacy is no longer confined to the IT department. The regulatory scope of the Sri Lanka PDPA impacts corporate strategy, legal responsibility, product development, and customer engagement.
This summit is specifically tailored for decision-makers who hold fiduciary or technical responsibility for customer data, operational security, and regulatory compliance.
CEOs & Directors
To safeguard enterprise equity, prevent crippling brand liability, and drive compliant digital transformations.
Compliance Officers
To establish standard Data Protection Management Programmes and audit corporate processing practices.
Legal Professionals
To master the regulatory provisions of the PDPA and advise clients on statutory compliance mechanisms.
IT & Security Leaders
To secure digital architectures, verify access controls, and design security policies that prevent breaches.
Data Protection Officers (DPOs)
To fulfill the statutory role, coordinate with the Data Protection Authority, and direct internal compliance.