Practical, technology-led resources for Sri Lanka's Personal Data Protection Act (PDPA) No. 9 of 2022 — build your Data Protection Management Programme (DPMP) and deploy Data Loss Prevention (DLP). Free. Open-source. Community-driven.
Everything you need to implement enterprise-grade Data Loss Prevention, tailored for Sri Lankan organizations and PDPA compliance.
Comprehensive 5-phase implementation guide from planning to continuous monitoring. No guesswork—just follow the phases.
View RoadmapEvery resource mapped to Sri Lanka's Personal Data Protection Act No. 9 of 2022 — including the Data Protection Management Programme (DPMP) required under Section 12(2).
Learn MoreDownload policy templates, checklists, data patterns, and training materials. Customize and deploy instantly.
Browse TemplatesNIC patterns, local banking formats, Sinhala/Tamil support, and PDPA-specific guidance. Built for LK enterprises.
View PatternsTrain department leaders to drive DLP adoption. Training materials, certification, and ongoing support included.
Start TrainingMIT Licensed. Fork, customize, contribute. Join hundreds of security professionals building together.
View on GitHubFrom planning to continuous monitoring in 6-12 months. Follow our proven framework.
Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (PDPA) is moving toward full enforcement. Its core accountability instrument is the Data Protection Management Programme (DPMP), required of controllers under Section 12(2) of the Act.
The PDPA is Sri Lanka's first comprehensive data protection law, overseen by the Data Protection Authority of Sri Lanka. It obliges every controller and processor to protect personal data — NIC numbers, financial records, health data, contact details — with demonstrable organisational and technical safeguards.
A DPMP is more than paperwork — it needs working technical controls. Data Loss Prevention (DLP) supplies them: automated discovery and classification of personal data, policy enforcement at endpoints, email and cloud, monitoring, and auditable incident reporting your DPMP can evidence.
The PDPA is Sri Lanka's Personal Data Protection Act, No. 9 of 2022 — the country's first comprehensive data protection law. It regulates how organisations (controllers and processors) collect, use, store and share personal data of individuals in Sri Lanka, and it is enforced by the Data Protection Authority of Sri Lanka as the Act moves toward full enforcement.
A Data Protection Management Programme (DPMP) is the internal accountability framework that controllers must implement under Section 12(2) of Sri Lanka's PDPA. A DPMP documents your policies, procedures, records of processing, risk assessments, training, breach response and monitoring controls that demonstrate ongoing PDPA compliance. OpenDLP-LK provides free templates, checklists and a phased roadmap to build a technology-led DPMP.
Data Loss Prevention (DLP) is a set of tools and processes that detect and prevent unauthorised disclosure of sensitive data such as NIC numbers, bank account details and health records. DLP provides the technical safeguards a DPMP needs: data discovery and classification, policy enforcement, monitoring and incident reporting — turning PDPA obligations into enforceable, auditable controls.
The PDPA applies to controllers and processors that process personal data in Sri Lanka, including public authorities, banks, telecoms, healthcare providers and businesses that offer goods or services to persons in Sri Lanka. The Act is being brought into force in stages, so organisations should establish their DPMP and technical controls such as DLP now, before enforcement and penalties apply.
Follow OpenDLP-LK's free 5-phase roadmap: (1) Planning and governance, (2) Data discovery and classification, (3) Policy development mapped to PDPA sections, (4) Pilot deployment, and (5) Continuous monitoring. Each phase includes checklists, Sri Lankan data patterns (NIC, passport, bank formats) and templates you can adopt into your DPMP.
Join organizations across Sri Lanka implementing world-class data protection.