As data increasingly shapes economies, governance and everyday life, Sri Lanka reached an important milestone with the Second National Data Protection Symposium, held on 6 January 2026 at Cinnamon Life, Colombo, under the aegis of the Bar Association of Sri Lanka (BASL). The symposium, themed “Safeguarding Privacy in the Age of Intelligence – From Legal Compliance to Ethical Innovation”, brought together 27 speakers from the legal, regulatory, technology and corporate sectors, reflecting the breadth and urgency of the national conversation on data protection.

Opening the proceedings, Chairperson Revan Weerasinghe captured the spirit of the event by observing that “Data by the looks of it is key to understanding the world’s problems and rectifying it, for data drives innovation.” His remarks framed the central tension explored throughout the day: while data has immense potential to unlock innovation and economic growth, it can only do so sustainably when governed responsibly and ethically.

Addressing the gathering, BASL President Rajeev Amarasuriya emphasised the strategic moment Sri Lanka faces, noting that “Sri Lanka today has a rare opportunity to leapfrog traditional stages of development through the rapid adoption of digital technologies.” Speakers repeatedly stressed, however, that digitisation without public confidence is fragile. Trust, they argued, is the invisible infrastructure of the digital economy.

This theme was powerfully articulated by the Chief Guest, His Lordship Justice Arjuna Obeysekera, who stated: “Trust does not emerge because systems are fast or because apps are convenient… Trust emerges when people believe they remain sovereign over their identity.” He further observed that “Connectivity moves data but trust moves people. And the assurance of privacy is the bridge that connects the two.” These reflections underscored why data protection is ultimately about human dignity, autonomy and confidence in institutions.

The symposium translated principle into practice through a full day of expert presentations and panel discussions. Sessions examined practical implementation of data protection obligations, the Personal Data Protection Act as a strategic digital enabler, and the growing responsibilities of organisations and data protection officers. Panel discussions explored organisational accountability, continuous compliance, and embedding a privacy culture across public institutions and private enterprises. Sector-specific engagements addressed data protection in banking and finance, privacy risks in digital transactions and e-commerce, and the importance of consumer confidence in secure digital ecosystems. Forward-looking discussions on trust in the digital economy and the ethical boundaries of artificial intelligence highlighted the need for accountability, transparency and human oversight in data-driven innovation.

Collectively, the Second National Data Protection Symposium reaffirmed a clear message: data can drive innovation and digitisation, but only trust anchored in strong data governance and ethical practice can convert that innovation into lasting economic and social progress for Sri Lanka.