The Hon. (Mrs.) Hasara Liyanage, Attorney-at-Law

¶ 01 Hon. Deputy Chairperson of Committees, thank you for this opportunity.

¶ 02 Today we are debating the Amendment Bill to the Personal Data Protection Act, No. 9 of 2022, at a moment when, as a country under the National People’s Power Government, we are embarking on a new political, economic, and social journey.

¶ 03 Among our Government’s foremost policies is digitalization. Within digitalization, data becomes the key focus because today data is the most valuable asset in the world. Therefore, I thank you again for allowing me time to participate in this debate.

¶ 04 Sri Lanka introduced, in 2022, the first Personal Data Protection Act in South Asia. In 2023, India enacted a parallel law. The principles underlying our 2022 Act are also reflected in Europe. Our law was introduced to Sri Lanka based on those principles.

¶ 05 The significance of this Bill is that it safeguards the rights of all of us, both as individuals and as a society, with respect to our information and data.

¶ 06 Tracing its origins, this law identifies and strengthens the rights of data subjects, and establishes a Data Protection Authority. One of our roles here in Parliament as people’s representatives is to build a public discourse on important laws. Although we came prepared for a substantive debate, from this morning the Opposition has been trying to drag this discussion onto other political battlegrounds. However, I believe more people than usual are watching today’s live proceedings; they can clearly see how the Opposition behaves while we are socializing an important message about data. The public, more than anyone, is sensitive to what happens to their data and how a government protects it. The definition of “personal data” in Clause 56 clearly includes “a name, identification number, physical, genetic, mental, social identity,” among others. So, the public need not harbor unfounded fears. As a Government, we are making necessary amendments to ensure the security of your data.

¶ 07 We also recognized that when the Act was first brought in 2022, society was not prepared. The country lacked necessary human and infrastructure capacities. Therefore, phased implementation became necessary. Analysts and researchers reviewed the law, and we now bring it with needed amendments.

¶ 08 We are establishing a Data Protection Authority, covering ministries, departments, provincial councils, local authorities, and provincial institutions. Compared with the private sector, the state sector lacks capacity. Therefore, this Amendment Bill provides for phased implementation. From this morning we have been lectured on how to implement; if those critics had analyzed and studied the amendments, they would see it is phased. You take a first step, review it, and proceed to the second. The first phase is to create public awareness. Ours is a country with multiple generations — some elderly have never even used a button phone, while Gen Z was born in a smart world. As a Government serving both, our first task is to create awareness and build a public discourse.

¶ 09 From this morning we were given lectures, yet many in the Opposition are not here now. Why? They come to make a show, speak, and leave; to create media spectacles. None of that is valid. Some of those lecturing may one day be giving advice wearing prison uniforms. Then they will understand the proverb about learning only when scalded. Politically, they say many things.

¶ 10 This Bill also enables us to reach international standards, which is crucial for the economic recovery we seek, foreign exchange, foreign investment, and tourism. Building public and investor trust in those sectors is essential. Hence the timely updating and amending of this law. This is not the end; it will be reviewed and implemented in phases. As a Government, we are doing this properly.

¶ 11 We currently have about 4,000 elected members in local authorities along with the President and a Government of 159 MPs. While we rebuild the country, we are also reforming necessary laws and regulations. A prime example is today’s amendments to the Personal Data Protection Act, No. 9 of 2022. Our foremost duty now is to educate the public. New measures can create undue fear; we must use Parliament to create discourse and awareness. Sensitive data, especially health and other personal data, is clearly addressed; the public need not have unfounded fears. As the NPP Government, we are a Government that ensures your security and guarantees your rights through this Bill. Do not be misled by media theatrics; in time, the truth will prevail. We will make this an Act that protects and guarantees rights for all.

¶ 12 Thank you, Hon. Deputy Chairperson of Committees, for the time.