Mr. Dimuth Bhashitha Atapattu, an officer of the Sri Lanka Administrative Service (SLAS), has been appointed as the new Director General of the Data Protection Authority with effect from 05 March 2026.
This appointment marks a significant step in strengthening Sri Lanka’s personal data protection framework, as it establishes a permanent Director General for the Authority.
The move is expected to enhance the enforcement of privacy regulations under the Personal Data Protection Act No. 9 of 2022, as amended by Act No. 22 of 2025.
The appointment is also seen as a key development in ensuring better protection of personal data and improving regulatory oversight in line with evolving digital governance standards in Sri Lanka.


