Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
Sri Lanka: Authority publishes draft regulation on fees applicable for exercising rights of data subjects
On October 12, 2024, the Data Protection Authority of Sri Lanka (the Authority) announced that it had launched a public consultation on the draft regulation on fees applicable for exercising the rights of data subjects under Section 17(6) of the Personal Data Protection Act No. 9 (PDPA).
The draft regulation prescribes that when the controller believes that the request is manifestly unreasonable, unfounded, excessive, or made in bad faith to cause disruptions to the controller or when the data subject requests further copies of their personal data when exercising the right of access to personal data under Section 13 of the PDPA, the controller may charge a fee not exceeding RS 1,000 (approx. $12) per request. When assessing whether a request is manifestly unreasonable, the controller must adopt an objective assessment involving a test of proportionality considering the effort or costs involved in giving effect to the request of the data subject.
Public comments may be submitted to [email protected] by completing the feedback form until November 15, 2024.
You can read the press release here, the draft regulations here, and download the feedback form here.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
