📊 Debate Surrounds State PII Safeguards & SLUDI Implementation

Concerns over State handling of Personally Identifiable Information (PII) have surfaced regarding Sri Lanka's digital initiatives, including the Sri Lanka Unique Identity (SLUDI) and the Personal Data Protection Act, No. 9 of 2022. • Historical Context: Critics cite the misuse of electoral registries during the 1983 pogrom to target households. However, analyses indicate these were manual, paper-based paper copies distributed via political candidates across ~14,000 Grama Niladhari (GN) divisions, confirming non-digital systems carry inherent exposure risks. • Digitalization & Risk: While low-friction digital transmission can amplify data leak risks, digitalization allows for advanced administrative and legal safeguards (analogue complements) not feasible in physical paper-based workflows. • Proposed Safeguards & System Reforms: • Restricting name and address access for polling station staff by leveraging SLUDI biometric authentication. • Transitioning to digital voter messaging to obscure personal phone numbers during campaigns, reducing paper usage and physical door-to-door canvassing risks. • Utilizing secure infrastructure, such as logging all access and copying actions within the Government Cloud, to prevent insider abuse while allowing GNs to deliver public services.