Saturday Jul 25, 2026
Saturday Jul 25, 2026
Friday, 24 July 2026 00:20 - - {{hitsCtrl.values.hits}}
Digital Economy Deputy Minister Eng. Eranga Weeraratne – Pic by Upul Abayasekara
Digital Economy Deputy Minister Eng. Eranga Weeraratne yesterday stressed that the tone for data protection within organisations must be set from the top, calling on business leaders to elevate data privacy and cybersecurity from an IT function to a priority.
Addressing a packed 2nd Data Privacy and Protection Summit 2026 organised by the Daily FT and CICRA, he said privacy and data protection must be designed into digital systems from the outset rather than being treated as an afterthought.
“Privacy is about safeguarding personal and sensitive information, while protection is about ensuring the security of that data against misuse, unauthorised access, and cyber threats. Public trust, therefore, will ultimately determine the success of digital transformation,” he said.
Noting that governments and businesses have always collected data, he said the risks have fundamentally changed, as information has moved from paper-based records to interconnected digital systems.
“Today, Sri Lanka is rapidly embracing digitalisation across the public sector, private sector, and industry. This transformation brings enormous opportunities, but it also introduces significant responsibilities,” he said.
Eng. Weeraratne pointed to the growing volume of sensitive information held by organisations, ranging from healthcare records and financial data to online behavioural information, warning that unauthorised access could have serious consequences for both individuals and institutions.
The Deputy Minister stressed that safeguarding data is no longer solely the responsibility of IT departments.
“This is not simply an issue for IT departments. Boards of Directors, Chairpersons, and Chief Executive Officers must treat data protection and privacy as strategic priorities,” he said.
He noted that failure to adequately protect information could undermine public confidence in both organisations and digital services.
Acknowledging the importance of legislation and regulatory enforcement, Eng. Weeraratne opined that legal frameworks alone cannot guarantee effective data protection.
He called for investment in developing skilled professionals capable of managing digital systems securely, whilst promoting organisational cultures where privacy and security are embedded in everyday operations.
He also insisted on the role of educational institutions, professional bodies, and industry events in strengthening awareness and technical capabilities.
The Deputy Minister said responsibility for data protection extends beyond organisations to individual citizens.
He observed that many cybersecurity incidents occur because users unknowingly disclose personal information, respond to fraudulent communications, or overshare sensitive details through social media and other online platforms. “Building public awareness is therefore essential to creating a secure digital society,” he said.
Eng. Weeraratne said public confidence would be critical as the Government expands digital public services, particularly those involving sensitive personal information such as biometric data.
He acknowledged that citizens naturally have concerns whenever biometric information is collected and warned that misinformation could erode trust if robust safeguards are not clearly communicated.
“Our objective is to ensure that personal data remains secure and that, even in the highly unlikely event of unauthorised access, the information cannot be meaningfully exploited. There can be no room for complacency when dealing with sensitive personal data,” he stressed.
Eng. Weeraratne assured the Government is investing in secure digital infrastructure to support its wider digital economy agenda.
He urged organisations and individuals alike to strengthen awareness of data privacy and protection as Sri Lanka accelerates its digital transformation, stressing that a secure and trusted digital ecosystem is essential for the country’s long-term economic development.
Title Partner of 2nd Data Protection and Privacy Summit was Mastercard, Strategic Partner was Concentric, Exclusive Banking Partner People’s Bank, Silver Partners LankaPay and io, Hospitality Partner Cinnamon Grand Colombo, and Brand Communications Partner MullenLowe. (CdeS)
