New legal guidance on protecting personal data in State institutions

The Data Protection Authority has issued a new Personal Data Protection Circular aimed at preparing State institutions for the implementation of the Personal Data Protection Act.

The circular provides guidance to State institutions on the measures required to comply with the Personal Data Protection Act, as amended by the Personal Data Protection (Amendment) Act, No. 25 of 2025.

Accordingly, ministries, government departments, provincial councils, local authorities, State corporations, statutory bodies, State-owned enterprises and other public authorities are required to act in accordance with the guidelines.

The circular also sets out the fundamental legal principles that public sector institutions must follow when collecting, using, storing and processing personal data.

The Data Protection Authority said the circular also includes a practical approach that State institutions can adopt to ensure compliance with the Personal Data Protection Act.

As the relevant provisions of the Act are scheduled to come into force on 1 January 2027, the Data Protection Authority has instructed all State institutions to commence preparations without delay.

Accordingly, State institutions will need to take prompt measures to establish personal data protection systems and procedures in line with the new legal requirements.

மேலும் படிக்க »

இந்த செய்தியைப் பற்றிய கருத்தை பதிவு செய்யுங்கள். மேலும் இந்த செய்தியை உங்கள் நண்பர்களுடன் பகிர்ந்து கொள்ளுங்கள்.