Frameworks
AI governance frameworks in Sri Lanka
Sri Lanka governs AI through its Personal Data Protection Act, whose processing and controller duties apply from 1 January 2027, with a right to review automated decisions to follow.
Law
LawSri Lanka PDPASri Lanka Personal Data Protection Act No. 9 of 2022, as amended in 2025Sri Lanka's PDPA as amended by Act No. 22 of 2025. Processing and controller duties apply from 1 January 2027, with DPIAs for profiling and transfer rules.LawPDPA section 18Sri Lanka PDPA section 18 and automated decision-makingSection 18 of Sri Lanka's PDPA gives a right to request review of solely automated decisions. Scope, exceptions, notice duty and what it means for AI.
Questions
Which AI governance frameworks are listed for Sri Lanka?
This page lists 2 instruments for Sri Lanka: Sri Lanka PDPA and PDPA section 18. Which ones apply to you depends on where you operate, your sector and how you use AI. Each framework page explains what it asks of you.
Does Aicura support the frameworks listed for Sri Lanka?
The frameworks listed for Sri Lanka are not built into Aicura. They are explained here to support your governance work, and every plan starts with the AI register, the record any framework needs first.
Start with the AI you run.
Every framework begins with knowing which AI systems and agents you have. The AI register is free to start.