Data Privacy & Protection Summit 2026

Sri Lanka's second Data Privacy and Protection Summit was held on 23rd July 2026, at Cinnamon Grand, Colombo. Organized by CICRA, the event brought together regulators, legal experts, and industry leaders to discuss AI-era data risk, PDPA compliance, and organizational governance under the PDPA Act No. 22 of 2025.

Sponsors & Partners

Backed by Industry Leaders

Proudly supported by the organisations shaping Sri Lanka's data protection landscape.

Title Partner

Strategic Partner

Exclusive Banking Partner

Silver Partner

Hospitality Partner

Brand Communications Partner

Summit Recap

23rd July 2026Cinnamon Grand, Colombo

Summit Highlights

Sri Lanka's second Data Privacy & Protection Summit, held on 23rd July 2026 at Cinnamon Grand, Colombo

Powered by Mastercard (Title Partner), Concentric AI (Strategic Partner), and People's Bank (Exclusive Banking Partner)

Supported by IO (Silver Partner), Cinnamon Grand Colombo (Hospitality Partner), and MullenLowe Sri Lanka (Brand Communications Partner)

Four dedicated sessions on dormant data risk, AI in data security, PDPA data subject requests, and Data Protection Impact Assessments

Keynote and panel contributions from Mastercard, LankaPay, People's Bank, Daily FT, Concentric AI, and CICRA Holdings

Regulatory participation from the Ministry of Digital Economy, TRCSL, and senior legal and compliance leaders across Sri Lanka's banking, apparel, and telecom sectors

Session Lineup

1Sleeping Data, Living Risks – Protecting What Your Organisation Stores in the Dark

2Protecting Crown Jewels – Is AI Breaking Data Security or Fixing It?

3Fulfilling Data Subject Requests – A Company's Legal Obligation and Operational Challenges Under PDPA

4Before the Breach – Why a Data Protection Impact Assessment (DPIA) Saves You from Disaster

Program

Sessions & Speakers

01Session 01

Sleeping Data, Living Risks

Protecting What Your Organisation Stores in the Dark

Old, dormant data is not harmless — it's a growing attack surface. This session focuses on finding, securing, and deleting risky legacy data.

Keynote Speaker

Ms. Mahesha Amarasuriya

Country Manager, Mastercard Sri Lanka

Guest Speaker

Mr. Shashi Madanayaka

Director, Account Management, Mastercard

Also Speaking

Panelist

CS

Mr. Channa De Silva

CEO, LankaPay

Panelist

PW

Ms. P.M. Saranga Sri Wimukthi

Chief Manager, Data Protection Unit / Data Protection Officer, People's Bank

Moderator

NC

Mr. Nisthar Cassim

CEO/Editor, Daily FT