For years, personal data in Sri Lanka moved quietly through businesses—customer profiles, contracts, employee records, and transaction histories—without much public scrutiny. That era has ended. ..

Under the rules, tech companies are required to implement a mechanism for collecting “verifiable” parental consent before ...