Connect with us

Features

Technical Overview of Online Safety Act

Published

on

Eng. Rohana Palliyaguru
Former Chief Operating Officer,
Sri Lanka Computer Emergency Readiness Team

In 2018, “EUROPOL” headquartered in Hague, Netherlands, a key organization established to prevent and combat serious internationally organized crimes, cybercrime and terrorism, had clearly defined the difference between cyber-dependent crimes and cyber-enabled crimes . As defined by them, any crime that can only be committed using computers, computer networks or other forms of information communication technology was named as cyber-dependent crimes and traditional crimes facilitated by the Internet and digital technology were categorized as cyber-enabled crimes. So, there are two categories of cybercrimes and these definitions are internally accepted.

Illicit intrusion and hacking into computer networks, disruption of computer functionality with the spread of viruses or other malware and Distributed Denial of Service (DDoS) attacks which can paralyze service delivery by computers are some examples for cyber-dependent crimes.

Some Cyber-enabled crimes are child sexual exploitation, fraud/scams,blackmail, extortion etc.

In the Sri Lankan context, Computer Crime Act No. 24 of 2007 has already provided necessary legislative provisions for tackling most of the cyber-dependent crimes.

Issues related to content such as defamation, harassment, misinformation, impersonation occur not only through online means but also through the use of other traditional means (electronic or print media). Hence, such things fall under cyber-enabled crimes. Sri Lanka has adequate laws to cobat such cyber-enabled traditional crimes. If not, the relevant legislation should be amended accordingly. It is not appropriate to make separate laws for such crimes considering only internet media, and doing so becomes very suspicious.

Hence, the objective of the Online Safety Act itself is problematic.

Also, naming the Act as Online Safety Act is also meaningless because its scope is very narrow. Otherwise it should be drafted in such a way to cover both types of cybercrimes mentioned above. But it is not so. Only provisions related to cyber-enabled crimes are mentioned in this act. These are often content related issues. Since the Act has given priority to regulating social media, I think it is appropriate to change its name to Social Media Regulation Act.

While drafting this Act, it appears that no inputs from information technology experts had been obtained as many of the provisions included are not practical. For example, provisions sought to be enforced through global Internet intermediaries are not enforceable because the Sri Lankan market is too small for them to bother about and we do not have the bargaining power necessary to ensure enforcement. This should have been pointed out by IT expert but that does not seem to have happened. If the global service providers decide to exit the Sri Lankan market due to those provisions, it will severely affect the country’s economy as well as social harmony.

This Online Security Act will have a huge impact on the freedom of expression of Sri Lankan citizens. The power to determine false/true statements and declare them as prohibited has been given to five people in a population of 21 million. These five who cannot be considered politically independent will be nominated and appointed by the President with the approval of the Constitutional Council. This will have a major impact on the independence and impartiality of the commission as the President is empowered to nominate politically biased loyalists at will. The power to remove them at any time has also been given to the President. Reasons for doing so has not bee specified in the Act itself. Affected members are only given an opportunity to state their case at a hearing and there is no appeal process.

As disqualification for appointment as a member of the commission, the Act mentions financial or other interest of such a member that may adversely impact the implementation of the commission’s functions. But there is no mention of required political independence of such members. It is essential that such a member cannot have a conflict of interest with Internet service providers, social network service providers, Internet intermediaries, but that is not mentioned here.

Although the Commission has been entrusted with wide powers and duties, there are many practical obstacles to carrying them out. It appears that the provisions have been included without adequate technical study or consultation. These practical problems will arise with implementation and the results will experience in the future.

The extent to which Internet Service Providers (ISPs) and Internet Intermediaries will comply with orders of the commission directly depends on the bargaining power we have as a country. We do not have the bargaining power of India, Japan or China. Our population of about 21 million is not a huge market that wields such influence. Also, global Internet intermediaries that provide various services have already introduced community standards to regulate the contents on their platforms which are currently in operation. Through that, they have also implemented a certain level of regulation in their platforms. It is unlikely that they will agree to carry out directives of a commission in a small country going beyond global community standards they have introduced.

ISPs only provide access to the Internet and are not concerned or responsible for its content or what users browse through the connection. It is therefore ludicrous to issue directives to the ISPs to provide opportunities to affected parties to respond to content deemed prohibited by a commission here. The ISPs have no control over such matters.

Persons making prohibited statements must be specifically identified before being notified to stop making such statements. Who is going to do that ? Also, in order to specifically identify a particular person it is essential to obtain privacy related data from the relevant social media service provider or Internet intermediary. Since every global service provider is obliged to protect the privacy of their users (via privacy policies), it is doubtful that they would override their privacy policies and provide that information to the commission.

The commission can issue notices to the Internet intermediaries to remove prohibited content from their online platform or block the content to users in Sri Lanka.But as I mentioned above, they will remove or block them only if the content is contrary to their policies. In such a case, the commission can only block the whole platform (eg: facebook) through Internet service providers in Sri Lanka. This is unfair to all users in Sri Lanka and as a result there is a danger that internet intermediaries may also withdraw from providing services to our country.

When internet intermediaries have the ability to automatically check whether some content violates their community standards through complex processes using modern technology such as artificial intelligence (AI algorithms), how far will they accept the recommendations made by the commission to remove prohibited statements?This should be thought of practically.

It has been proposed to maintain an online portal containing information to give the public an understanding of the falsity of a certain statement. This is funny because the public can get more information from lot of other independent sources and come to their own conclusions than referring to the information provided via this portal.

A team with expertise in information technology is required to carry out investigations that may be necessary for the execution of the Commission’s powers and duties. Who is going to do this? Does the Commission have a permanent internal investigation team?

It is not practical to register Global Internet Intermediaries in such a manner as may be specified by the rules made by this Act. We are a bankrupt country without enough market or bargaining power to enforce such provisions. Therefore, this provision should be reconsidered.

In order to specifically identify a person who has made a false statement, it is essential to obtain personally identifiable information (PII) from Internet intermediaries. How practical is this? As I mentioned above, will they provide the information requested by the Commission? Even if that is granted, how can the legal action be taken if the person is outside Sri Lanka? Will ISPs in overseas provide relevant data to the Commission for investigations?

Also, a fact that is true at one moment may be false at another. Even if a provocation or riot occurred on the basis of a truthful statement, it is also possible that the commission later defines it as a false statement because of the riots.

Disruption of a religious assembly by a true statement may later become a false statement because of the fact that the incident did not occur. For example, the Easter bomb attack may not happen because of a statement spread predicting it can happen on that day and disturbs religious gatherings. But since the bomb blast did not happen, later the above statement can be interpreted as a false statement justifying that it was made purposely to disturb the said religious meetings.

Outrage of religious feelings is a very sensitive matter and there should be a balance of freedom of expression and its limitations. One’s beliefs regarding a religion may be contrary to another’s and how should the right to express it be? For example, is it an insult to a religion and a false statement to declare that there is no one called God?

Cheating doesn’t just happen online. Other traditional methods are also widely used for that. Therefore, it is more appropriate to introduce a law that is common to all or to update an existing law rather than make legal provisions limited to online media.

Impersonating doesn’t just happen online either. This fraud can also be done by using fake documents. Therefore, the existing laws should have been updated to cover online methods as well.

The provisions of this Act regarding child abuse should have been made by updating other existing Acts such as the Child Protection Act, and not by highlighting them as an offenses due to the medium of the Internet. Online techniques are just one plaform through which child abuse occurs.

Although it is possible to obtain an order requiring disclosure of information relating tho those making statements using a fake online account or bot, as I have mentioned several times above, it is doubtful to what extent Internet intermediary service providers will cooperat due to their existing privacy policies. If there was an international law in this regard, this may have been easy.But we know from past experience that obtaining privacy related information through cyber security conventions is not practical.

This Act exempts ISPs from liability in case something is uploaded or interfered with by a third party. It is not necessary to say this because it is not their responsibility. As stated earlier, if those who drafted the Bill had recognized the role of Internet service providers, such a provision would not have been provided.

Global Internet Intermediary Service Providers will not take action on content unless it violates existing community standards. It is also unlikely that they will appear in our courts to resolve content related issues.

I feel that it is required to re-think whether those global Internet intermediaries agree to the various conditions stipulated in Section 29 of the Act. Internet intermediary service providers are well aware that fake online accounts and organized counterfeiting occur through their platforms. But, they have not taken drastic measures to ban them completely, often to protect freedom of expression and individual identity. They also do not hesitate to cancel such accounts if they violate their community standards. It is unlikely that they will implement the Commission’s directives to ban fake accounts.

Finally, it must be mentioned that this is not an Act introduced with the broad objective of creating security online, but one aimed at controlling content on the Internet. In the future, we can experience the impact of this on the freedom of expression of the people as well as the economy and social activism.



Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Features

Digital transformation in the Global South

Published

on

AI Summit, India

Understanding Sri Lanka through the India AI Impact Summit 2026

Artificial Intelligence (AI) has rapidly moved from being a specialised technological field into a major social force that shapes economies, cultures, governance, and everyday human life. The India AI Impact Summit 2026, held in New Delhi, symbolised a significant moment for the Global South, especially South Asia, because it demonstrated that artificial intelligence is no longer limited to advanced Western economies but can also become a development tool for emerging societies. The summit gathered governments, researchers, technology companies, and international organisations to discuss how AI can support social welfare, public services, and economic growth. Its central message was that artificial intelligence should be human centred and socially useful. Instead of focusing only on powerful computing systems, the summit emphasised affordable technologies, open collaboration, and ethical responsibility so that ordinary citizens can benefit from digital transformation. For South Asia, where large populations live in rural areas and resources are unevenly distributed, this idea is particularly important.

People friendly AI

One of the most important concepts promoted at the summit was the idea of “people friendly AI.” This means that artificial intelligence should be accessible, understandable, and helpful in daily activities. In South Asia, language diversity and economic inequality often prevent people from using advanced technology. Therefore, systems designed for local languages, and smartphones, play a crucial role. When a farmer can speak to a digital assistant in Sinhala, Tamil, or Hindi and receive advice about weather patterns or crop diseases, technology becomes practical rather than distant. Similarly, voice based interfaces allow elderly people and individuals with limited literacy to use digital services. Affordable mobile based AI tools reduce the digital divide between urban and rural populations. As a result, artificial intelligence stops being an elite instrument and becomes a social assistant that supports ordinary life.

Transformation in education sector

The influence of this transformation is visible in education. AI based learning platforms can analyse student performance and provide personalised lessons. Instead of all students following the same pace, weaker learners receive additional practice while advanced learners explore deeper material. Teachers are able to focus on mentoring and explanation rather than repetitive instruction. In many South Asian societies, including Sri Lanka, education has long depended on memorisation and private tuition classes. AI tutoring systems could reduce educational inequality by giving rural students access to learning resources, similar to those available in cities. A student who struggles with mathematics, for example, can practice step by step exercises automatically generated according to individual mistakes. This reduces pressure, improves confidence, and gradually changes the educational culture from rote learning toward understanding and problem solving.

Healthcare is another area where AI is becoming people friendly. Many rural communities face shortages of doctors and medical facilities. AI-assisted diagnostic tools can analyse symptoms, or medical images, and provide early warnings about diseases. Patients can receive preliminary advice through mobile applications, which helps them decide whether hospital visits are necessary. This reduces overcrowding in hospitals and saves travel costs. Public health authorities can also analyse large datasets to monitor disease outbreaks and allocate resources efficiently. In this way, artificial intelligence supports not only individual patients but also the entire health system.

Agriculture, which remains a primary livelihood for millions in South Asia, is also undergoing transformation. Farmers traditionally rely on seasonal experience, but climate change has made weather patterns unpredictable. AI systems that analyse rainfall data, soil conditions, and satellite images can predict crop performance and recommend irrigation schedules. Early detection of plant diseases prevents large-scale crop losses. For a small farmer, accurate information can mean the difference between profit and debt. Thus, AI directly influences economic stability at the household level.

Employment and communication reshaped

Artificial intelligence is also reshaping employment and communication. Routine clerical and repetitive tasks are increasingly automated, while demand grows for digital skills, such as data management, programming, and online services. Many young people in South Asia are beginning to participate in remote work, freelancing, and digital entrepreneurship. AI translation tools allow communication across languages, enabling businesses to reach international customers. Knowledge becomes more accessible because information can be summarised, translated, and explained instantly. This leads to a broader sociological shift: authority moves from tradition and hierarchy toward information and analytical reasoning. Individuals rely more on data when making decisions about education, finance, and career planning.

Impact on Sri Lanka

The impact on Sri Lanka is especially significant because the country shares many social and economic conditions with India and often adopts regional technological innovations. Sri Lanka has already begun integrating artificial intelligence into education, agriculture, and public administration. In schools and universities, AI learning tools may reduce the heavy dependence on private tuition and help students in rural districts receive equal academic support. In agriculture, predictive analytics can help farmers manage climate variability, improving productivity and food security. In public administration, digital systems can speed up document processing, licensing, and public service delivery. Smart transportation systems may reduce congestion in urban areas, saving time and fuel.

Economic opportunities are also expanding. Sri Lanka’s service based economy and IT outsourcing sector can benefit from increased global demand for digital skills. AI-assisted software development, data annotation, and online service platforms can create new employment pathways, especially for educated youth. Small and medium entrepreneurs can use AI tools to design products, manage finances, and market services internationally at low cost. In tourism, personalised digital assistants and recommendation systems can improve visitor experiences and help small businesses connect with travellers directly.

Digital inequality

However, the integration of artificial intelligence also raises serious concerns. Digital inequality may widen if only educated urban populations gain access to technological skills. Some routine jobs may disappear, requiring workers to retrain. There are also risks of misinformation, surveillance, and misuse of personal data. Ethical regulation and transparency are, therefore, essential. Governments must develop policies that protect privacy, ensure accountability, and encourage responsible innovation. Public awareness and digital literacy programmes are necessary so that citizens understand both the benefits and limitations of AI systems.

Beyond economics and services, AI is gradually influencing social relationships and cultural patterns. South Asian societies have traditionally relied on hierarchy and personal authority, but data-driven decision making changes this structure. Agricultural planning may depend on predictive models rather than ancestral practice, and educational evaluation may rely on learning analytics instead of examination rankings alone. This does not eliminate human judgment, but it alters its basis. Societies increasingly value analytical thinking, creativity, and adaptability. Educational systems must, therefore, move beyond memorisation toward critical thinking and interdisciplinary learning.

AI contribution to national development

In Sri Lanka, these changes may contribute to national development if implemented carefully. AI-supported financial monitoring can improve transparency and reduce corruption. Smart infrastructure systems can help manage transportation and urban planning. Communication technologies can support interaction among Sinhala, Tamil, and English speakers, promoting social inclusion in a multilingual society. Assistive technologies can improve accessibility for persons with disabilities, enabling broader participation in education and employment. These developments show that artificial intelligence is not merely a technological innovation but a social instrument capable of strengthening equality when guided by ethical policy.

Symbolic shift

Ultimately, the India AI Impact Summit 2026 represents a symbolic shift in the global technological landscape. It indicates that developing nations are beginning to shape the future of artificial intelligence according to their own social needs rather than passively importing technology. For South Asia and Sri Lanka, the challenge is not whether AI will arrive but how it will be used. If education systems prepare citizens, if governments establish responsible regulations, and if access remains inclusive, AI can become a partner in development rather than a source of inequality. The future will likely involve close collaboration between humans and intelligent systems, where machines assist decision making while human values guide outcomes. In this sense, artificial intelligence does not replace human society, but transforms it, offering Sri Lanka an opportunity to build a more knowledge based, efficient, and equitable social order in the decades ahead.

by Milinda Mayadunna

Continue Reading

Features

Governance cannot be a postscript to economics

Published

on

Kristalina-Georgieva

The visit by IMF Managing Director Kristalina Georgieva to Sri Lanka was widely described as a success for the government. She was fulsome in her praise of the country and its developmental potential. The grounds for this success and collaborative spirit go back to the inception of the agreement signed in March 2023 in the aftermath of Sri Lanka’s declaration of international bankruptcy. The IMF came in to fulfil its role as lender of last resort. The government of the day bit the bullet. It imposed unpopular policies on the people, most notably significant tax increases. At a moment when the country had run out of foreign exchange, defaulted on its debt, and faced shortages of fuel, medicine and food, the IMF programme restored a measure of confidence both within the country and internationally.

Since 1965 Sri Lanka has entered into agreements with the IMF on 16 occasions none of which were taken to their full term. The present agreement is the 17th agreement . IMF agreements have traditionally been focused on economic restructuring. Invariably the terms of agreement have been harsh on the people, with priority being given to ensure the debtor country pays its loans back to the IMF. Fiscal consolidation, tax increases, subsidy reductions and structural reforms have been the recurring features. The social and political costs have often been high. Governments have lost popularity and sometimes fallen before programmes were completed. The IMF has learned from experience across the world that macroeconomic reform without social protection can generate backlash, instability and policy reversals.

The experience of countries such as Greece, Ireland and Portugal in dealing with the IMF during the eurozone crisis demonstrated the political and social costs of austerity, even though those economies later stabilised and returned to growth. The evolution of IMF policies has ensured that there are two special features in the present agreement. The first is that the IMF has included a safety net of social welfare spending to mitigate the impact of the austerity measures on the poorest sections of the population. No country can hope to grow at 7 or 8 percent per annum when a third of its people are struggling to survive. Poverty alleviation measures in the Aswesuma programme, developed with the agreement of the IMF, are key to mitigating the worst impacts of the rising cost of living and limited opportunities for employment.

Governance Included

The second important feature of the IMF agreement is the inclusion of governance criteria to be implemented alongside the economic reforms. It goes to the heart of why Sri Lanka has had to return to the IMF repeatedly. Economic mismanagement did not take place in a vacuum. It was enabled by weak institutions, politicised decision making, non-transparent procurement, and the erosion of checks and balances. In its economic reform process, the IMF has included an assessment of governance related issues to accompany the economic restructuring process. At the top of this list is tackling the problem of corruption by means of publicising contracts, ensuring open solicitation of tenders, and strengthening financial accountability mechanisms.

The IMF also encouraged a civil society diagnostic study and engaged with civil society organisations regularly. The civil society analysis of governance issues which was promoted by Verite Research and facilitated by Transparency International was wider in scope than those identified in the IMF’s own diagnostic. It pointed to systemic weaknesses that go beyond narrow fiscal concerns. The civil society diagnostic study included issues of social justice such as the inequitable impact of targeting EPF and ETF funds of workers for restructuring and the need to repeal abuse prone laws such as the Prevention of Terrorism Act and the Online Safety Act. When workers see their retirement savings restructured without adequate consultation, confidence in policy making erodes. When laws are perceived to be instruments of arbitrary power, social cohesion weakens.

During a meeting between the IMF Managing Director Georgeiva and civil society members last week, there was discussion on the implementation of those governance measures in which she spoke in a manner that was not alien to the civil society representatives. Significantly, the civil society diagnostic report also referred to the ethnic conflict and the breakdown of interethnic relations that led to three decades of deadly war, causing severe economic losses to the country. This was also discussed at the meeting. Governance is not only about accounting standards and procurement rules. It is about social justice, equality before the law, and political representation. On this issue the government has more to do. Ethnic and religious minorities find themselves inadequately represented in high level government committees. The provincial council system that ensured ethnic and minority representation at the provincial level continues to be in abeyance.

Beyond IMF

The significance of addressing governance issues is not only relevant to the IMF agreement. It is also important in accessing tariff concessions from the European Union. The GSP Plus tariff concession given by the EU enables Sri Lankan exports to be sold at lower prices and win markets in Europe. For an export dependent economy, this is critical. Loss of such concessions would directly affect employment in key sectors such as apparel. The government needs to address longstanding EU concerns about the protection of human rights and labour rights in the country. The EU has, for several years, linked the continuation of GSP Plus to compliance with international conventions. This includes the condition that the Prevention of Terrorism Act (PTA) be brought into line with international standards. The government’s alternative in the form of the draft Protection of the State from Terrorism Act (PTSA) is less abusive on paper but is wider in scope and retains the core features of the PTA.

Governance and social justice factors cannot be ignored or downplayed in the pursuit of economic development. If Sri Lanka is to break out of its cycle of crisis and bailout, it must internalise the fact that good governance which promotes social justice and more fairly distributes the costs and fruits of development is the foundation on which durable economic growth is built. Without it, stabilisation will remain fragile, poverty will remain high, and the promise of 7 to 8 percent growth will remain elusive. The implementation of governance reforms will also have a positive effect through the creative mechanism of governance linked bonds, an innovation of the present IMF agreement.

The Sri Lankan think tank Verité Research played an important role in the development of governance linked bonds. They reduce the rate of interest payable by the government on outstanding debt on the basis that better governance leads to a reduction in risk for those who have lent their money to Sri Lanka. This is a direct financial reward for governance reform. The present IMF programme offers an opportunity not only to stabilise the economy but to strengthen the institutions that underpin it. That opportunity needs to be taken. Without it, the country cannot attract investment, expand exports and move towards shared prosperity and to a 7-8 percent growth rate that can lift the country out of its debt trap.

by Jehan Perera

Continue Reading

Features

MISTER Band … in the spotlight

Published

on

MISTER Band: For the past four consecutive years, they have performed overseas, during New Year’s Eve

It’s a good sign, indeed, for the local scene, to see artistes, who have not been very much in the limelight, now making their presence felt, in a big way, and I’m glad to give them the publicity they deserve.

On 10th February we had Yellow Beatz in the spotlight and this week it’s MISTER Band.

This outfit is certainly not new to our scene; they have been around since 2012, under the leadership of Sithum Waidyarathne.

The seven energetic members who make up MISTER Band are:

Sithum Waidyarathne (leader/founder/saxophonist/guitarist and vocalist), Rangana Seram (bass guitarist), Vihanga Liyanage (vocalist), Ridmi Dissanayake (female vocalist), Nuwan Cristo (keyboardist/vocalist), Kasun Thennakoon (lead guitarist), and Nuwan Madushanka (drummer).

According to Sithum, their vision is to provide high quality entertainmen to those who engage their services.

“Thanks to our engaging performances and growing popularity, MISTER Band continues to be in high demand … at weddings, corporate events and dinner dances,” said Sithum.

They predominantly cover English and Sinhala music, as well as the most popular genres.

And the reviews that come their way, after a performance, are excellent, they say, and this is one of the bouquets they received:

It was a pleasure to have you at our wedding. Being avid music fans we wanted the best music, not just a big named band, and you guys acceded that expectations. Big thanks to Sithum for being very supportive, attentive and generous.

The best thing is the post feedback from all the guests. Normally we get mixed reviews but the whole crowd was impressed by you.

MISTER Band was one of our best choices for our wedding.

What is interesting is that for the past four consecutive years, this outfit has performed overseas, during New Year’s Eve, thereby taking their music to the international stage, as well.

The band has also produced a collection of original songs, with around six original tracks composed by the band leader, Sithum Waidyarathne, including ‘Suraganak Dutuwa,’ ‘Landuni,’ ‘Dili Dili Payana,’ ‘Hada Wedana,’ and ‘Nil Kandu Athare.’

Two more songs are set to be released this month: ‘Hitha Norida’ and ‘Premaye Hanguman.’

In addition to their original music, they have also created a strong online presence by performing and uploading over 50 cover songs and medleys to YouTube.

“We’re now planning to connect with an even wider audience by releasing more cover content very soon,” said Sithum, adding that they are also very active on social media, under the name Mister Band Official – on Facebook, Instagram, YouTube, and TikTok.

Continue Reading

Trending