For years, personal data in Sri Lanka moved quietly through businesses—customer profiles, contracts, employee records, and transaction histories—without much public scrutiny. That era has ended. ..