Connect Responsibility to Practice
Privacy work spans the data an organisation handles, the people accountable for it, the systems processing it and the evidence of how decisions are made.
Understand the information, purpose, stakeholders and applicable obligations.
Make decision-making responsibilities and escalation paths explicit.
Keep controls, implementation records and identified gaps connected.
Explore the PDPA Framework
The Whole Act, Inside GitLab documents an approach to expressing Sri Lanka’s PDPA requirements in a GitLab compliance framework. The guide includes downloadable resources, a requirement explorer and the limits of automated controls.
Open the PDPA frameworkBuild Privacy Understanding
Controls are only useful when people understand the choices they need to make. Discuss awareness sessions for teams, decision-focused workshops for leaders or practical implementation learning.
Explore training →Discuss Your Priorities
Bring a specific concern, a programme you are developing or a framework you want to apply. The first conversation establishes context and the kind of support needed.
Discuss privacy and governance →Looking for This Website’s Privacy Notice?
This page describes the privacy and governance practice. Information about the website itself is available separately.
Read the website privacy notice →