Dimuth Atapattu Appointed as First Director General of Data Protection Authority 📈

The Data Protection Authority (DPA) has officially appointed Dimuth Bhashitha Atapattu, an officer of the Sri Lanka Administrative Service (SLAS), as its Director General effective 5 March 2026. This move marks a critical step in operationalizing the Personal Data Protection Act No. 9 of 2022. • Strategic Leadership: Atapattu transitions from his role as Director of Commercialisation and Partnerships at the Ministry of Digital Economy. He also holds board positions at Sri Lanka CERT and the LK Domain Registry. • Professional Background: His experience spans both public and private sectors, including roles at Virtusa (Colombo/UK) and the Ministry of Defence. He holds postgraduate degrees from the University of Melbourne and the University of Sri Jayewardenepura. • Economic Impact: The DPA is tasked with safeguarding privacy rights and fostering a secure digital economy. This is a core component of the Government’s Digital Economy Blueprint, aimed at enhancing digital trust and responsible data governance. • Implementation Status: Based on provisional plans, the Personal Data Protection Act (amended in 2025) will be brought into operation in phases as the DPA becomes fully functional under the new leadership.