Sri Lanka's main data protection law is the Personal Data Protection Act No. 9 of 2022 (PDPA). It's the first independent legislation for personal data protection in South Asia. The PDPA aims to safeguard personal data, foster innovation in the digital economy, and ensure regulatory compliance.