Data Privacy and Protection Summit 2026 announces Mastercard as Title Partner

Mastercard Country Manager – Sri Lanka Mahesha Amarasuriya (right) exchanges the sponsorship agreement with CICRA Group Executive Director and CEO Boshan Dayaratne – Pic by Sameera Wijesinghe 

• Leading platform for dialogue on data protection, compliance, and emerging regulatory frameworks on 23 July at Cinnamon Grand

The Data Privacy and Protection Summit, organised by the Daily FT and CICRA, has announced Mastercard as its Title Partner for 2026. 

The partnership underscores Mastercard’s commitment to advancing conversations around data privacy, security, and trust, while reinforcing the Summit’s role as a leading platform for dialogue on data protection, compliance, and emerging regulatory frameworks.

Mastercard, a global leader in payments technology and a trusted partner in advancing Sri Lanka’s digital economy, served as the Strategic Partner for the inaugural edition of the Summit in 2025. Its elevation to Title Partner reflects a deepened commitment to supporting Sri Lankan organisations as they navigate an increasingly complex data protection and privacy landscape. 

The announcement comes at a pivotal moment as the country moves towards the full enforcement of the Personal Data Protection Act (PDPA), placing data governance, compliance, and trust at the forefront of organisational priorities across sectors.

The Data Privacy and Protection Summit, Sri Lanka’s premier platform for data protection leadership, will return for its second edition on 23 July at the Oak Room, Cinnamon Grand Colombo. Bringing together data protection professionals, legal and compliance experts, technology leaders, regulators, and policymakers, the Summit is set to be the country’s foremost forum for shaping the future of privacy, security, and responsible data governance.

As organisations navigate an increasingly complex threat landscape, accelerate Artificial Intelligence (AI) adoption, and prepare for the full enforcement of Sri Lanka’s PDPA, the Summit will provide a critical platform for dialogue, knowledge sharing, and practical guidance. Through a series of expert-led discussions and deep-dive sessions, attendees will gain actionable insights and strategies to strengthen governance frameworks, manage emerging risks, and build resilient, PDPA-ready organisations.

Attendees can look forward to a carefully curated agenda that addresses the most pressing opportunities and challenges in data protection today, including:

• “Sleeping Data, Living Risks: Protecting What Your Organisation Stores in the Dark” – This session will explore the hidden dangers of unstructured and forgotten data. As organisations accumulate vast amounts of information across cloud and on-premises environments, much of it lies dormant yet vulnerable. Experts will discuss how to discover, classify, and secure this “sleeping data” before it becomes a living risk.
• “Before the Breach: Why a Data Protection Impact Assessment (DPIA) Saves You from Disaster” – Prevention is always better than cure. This session will delve into the critical role of DPIA in identifying and mitigating privacy risks before they materialise into costly breaches. Attendees will learn how to embed DPIA into their project lifecycles to ensure compliance and build stakeholder trust.
• “Protecting Your Crown Jewels – AI is Breaking Data Security and Fixing It?” – A deep dive into the dual-edged nature of AI in data security. This session will examine how cybercriminals are leveraging AI to launch sophisticated attacks, while simultaneously exploring how AI-driven defence mechanisms can autonomously detect, respond to, and neutralise threats to an organisation’s most critical assets.
• “Fulfilling Data Subject Requests: A Company’s Legal Obligation and Operational Challenge Under PDPA” – With the PDPA enforcement imminent, organisations must be prepared to handle Data Subject Requests (DSRs) efficiently and within mandated timelines. This session will break down the legal requirements, operational complexities, and best practices for managing DSRs without disrupting business operations.

CICRA Group Executive Director and CEO Boshan Dayaratne expressed his profound appreciation for Mastercard’s continued trust and elevated commitment to the Summit and its mission. 

“We are incredibly proud and grateful to welcome Mastercard as our Title Partner for 2026,” he said. “Their belief in CICRA and the Daily FT, and our shared vision for promoting and advocating robust data protection in Sri Lanka, is a powerful endorsement of our work. Mastercard’s decision to step up as the Title Partner is a great strength and support that will enable us to take this event to the next level, providing even greater value to all participants and stakeholders as we collectively work towards a more secure and compliant digital future for Sri Lanka.”

Mastercard Country Manager – Sri Lanka Mahesha Amarasuriya said: “Mastercard is delighted to deepen its association with the Data Privacy and Protection Summit as Title Partner and to collaborate with CICRA and the Daily FT in advancing Sri Lanka’s data protection agenda. In an increasingly digital world, trust is both a competitive advantage and a societal imperative, and robust data protection is fundamental to building and sustaining that trust. As Sri Lanka progresses towards the implementation of the PDPA, organisations have a unique opportunity to embed privacy, security, and accountability into their business strategies. Through this association, Mastercard remains committed to fostering informed dialogue, sharing global expertise, and supporting the development of a resilient and trusted digital ecosystem that enables businesses and citizens to thrive with confidence.”

Both Government institutions and private sector organisations have a shared responsibility in protecting citizen and customer data. With PDPA enforcement imminent, public sector data controllers and private enterprises alike must act now to avoid penalties, reputational damage, and security breaches. The Summit offers a unique opportunity to learn from global leaders, understand regulatory obligations, and build a proactive defence strategy.

Registration is now open, with limited seats available. Data protection officers, cybersecurity professionals, Government officials, legal and compliance practitioners, and business leaders are encouraged to register early. Visit www.cicrasummit.lk to register and secure your participation at this premier event or call the Summit Secretariat: 0710 600 800.