Organized by OSSEC INC logo OSSEC INC.
Personal Data Protection Act  ·  Awareness Session

PDPA Awareness Session 2026

The Roles, Responsibilities, and Compliance Obligations of Data Protection Officers under the Personal Data Protection Act No. 9 of 2022

Join us for an insightful session designed to help organizations understand Sri Lankan Personal Data Protection Act (PDPA) and the critical role of Data Protection Officers (DPOs) in ensuring compliance.

DATE July 15, 2026 TIME 1:30 PM – 4:00 PM VENUE The Blue,Hilton Colombo FEE FREE OF CHARGE
§ Event Particulars

Event Details

DateJuly 15, 2026
Time1:30 PM – 4:00 PM
VenueThe Blue,Hilton Colombo  Get directions →
Registration FeeFREE OF CHARGE
RefreshmentsComplimentary refreshments provided
SeatsLimited seats available
Mediumසිංහල & English
Organized byOSSEC INC logo OSSEC INC.

Note: Participation is free of charge. As seating is limited, participants are encouraged to register early to secure their place.

§ About

About the Session

Sri Lanka Personal Data Protection Act introduces significant obligations for organizations that collect, process, and store personal data.

This awareness session aims to provide practical guidance on the legal framework, regulatory requirements, and the responsibilities of Data Protection Officers in ensuring organizational compliance.

Focus Areas

PDPA Act Awareness &
Data Protection Officer's
Role & Responsibility

From the regulatory framework introduced by the Act to the practical mandates and accountabilities expected of a Data Protection Officer.

§ Speaker

Meet the Speaker

Organized by OSSEC INC. OSSEC INC
Dr. Thusitha B. Abeysekara

Dr. Thusitha B. Abeysekara

Senior Lecturer in Law

Head-Legal Studies Unit
Faculty of Management Studies and Commerce
University of Sri Jayewardenepura, Gangodawila, Nugegoda, Sri Lanka

PhD in Computer Law — University of Exeter, UK

LLM in Computer and Communications Law — Queen Mary, University of London, UK

LLB (Hons) (2nd Upper) — University of Colombo

Attorney-at-Law (1st Class)

Diploma in IR — BCIS, Sri Lanka

Diploma in HR — Adam Mickiewicz University, Poland

Diploma in Digital Archives — Central European University, Hungary

§ Session Topics

Session Agenda

Nine clauses, delivered across two parts — the law, and the officer who upholds it.

Part I — The PDPA Act

§ 1–4
  • §01Overview of the Personal Data Protection Act (PDPA)
  • §02PDPA Regulatory and Legal Framework
  • §03Key Principles of Data Protection
  • §04Controllers' and Processors' Obligations and Responsibilities under the PDPA

Part II — The DPO

§ 5–9
  • §05Role of a Data Protection Officer (DPO)
  • §06Duties and Responsibilities of DPOs
  • §07Duites under Data Protection Management Programme (section 12 of the act )
  • §08Best Practices for Data Protection Compliance
  • §09Q&A Session
§ Audience

Who Should Attend?

This session is ideal for anyone responsible for personal data within their organization.

§Data Protection Officers (DPOs)
§Compliance Officers
§Information Security Professionals
§IT Managers & Administrators
§Risk Management Professionals
§Legal Managers/Officers
§Internal Auditors
§Senior Management
§Human Resource Managers
§Banking & Financial Institution Staff
§Government & private sector staff handling personal data
§ Outcomes

Why Should You Attend?

Gain an understanding of Sri Lanka's PDPA requirements.

Learn the responsibilities and accountability of Data Protection Officers.

Understand regulatory expectations and compliance obligations.

Discover practical approaches for implementing data protection controls.

Network with industry professionals and subject matter experts.

§ Reserve Your Seat

Register for the Session

Seats are limited and this session is free to attend. Complete the form to confirm your Seat.

DATE July 15, 2026 VENUE The Blue,Hilton Colombo TIME 1:30–4:00 PM FEE FREE OF CHARGE
Registration Form

Confirm your attendance

⚠ Limited seats available — early registration is recommended.