📈 Sri Lanka's Systemic Financial & Data Risks

A critical analysis reveals that Sri Lanka's economy is facing severe systemic risks due to a "culture of compliance without enforcement," leading to increased financial crime and data vulnerabilities. • Core Issues & Recent Cases The reported Rs. 13.2 billion fraud at National Development Bank PLC highlights deep structural weaknesses. Despite having frameworks like the Personal Data Protection Act and FIU monitoring, enforcement remains uneven and fragmented across institutional silos. • Digital Economy & Sector Vulnerabilities ICT/BPM & Fintech: Reliance on digital platforms and outsourced services is creating "regulatory grey areas" that sophisticated criminal networks exploit. Data as Currency: Data breaches are now the primary precursor to identity theft and illicit financial flows, yet they are often treated merely as PR challenges rather than security threats. • Economic & National Impact Investor Confidence: Structural compliance without operational strength risks higher capital costs and reduced FDI. Fiscal Erosion: Illicit flows directly weaken state revenue and distort market planning, intersecting with broader national security concerns like corruption and organized crime. • Recommended Actions Immediate operationalization of an empowered Data Protection Commission. Shift from fragmented oversight to integrated, real-time monitoring between the Central Bank, law enforcement, and cyber units. Strengthening oversight of digital and outsourced financial services to close existing regulatory gaps. _Source: Analysis based on provisional investigative insights (April 2026)_