PDPA: FROM ACT TO ACTION
Thursday
5 November 2026 - Cinnamon Life, Colombo
8.30 AM to 2.00 PM
About the event
From PDPA readiness to real implementation.
Most organizations know what the PDPA requires.
The hard part is putting it into practice.
GRC Summit 2026 takes you through the full implementation journey in one focused morning: finding your gaps, building a roadmap, putting it into action, and keeping compliance running.
- Assess
- Plan
- Implement
- Sustain
The full PDPA journey, in one morning
Learn from legal and privacy specialists, industry leaders and the Xapi team, then put your questions to an expert panel on the real challenges organizations face.
Who Should Attend
CEOs, Managing Directors, and Founders
CIOs, CTOs, and Heads of IT
Chief Risk and Compliance Officers
Data Protection Officers
Heads of Legal, Operations, and HR
What You'll Take Away
A clear view of what the DPA expects from organizations
A practical roadmap for PDPA implementation
How to handle consent, data subject requests, and breach response in practice
How technology can automate and simplify ongoing compliance
Answers to your questions from regulators and practitioners
Speakers

Dimuth Atapattu
Leads Sri Lanka's Data Protection Authority as Director General, guiding the nation toward a future where personal data is respected, protected and trusted.

Trinesh Fernando
A respected voice in digital governance, AI and data protection, Trinesh Fernando is a former Group General Counsel and DPO. As a member of the PDPA Drafting Committee, he brings rare insight into both the intent of the Act and how it works in practice.

Ashwini Natesan
Ashwini Natesan is a legal consultant and research fellow in technology, media and telecommunications law, and one of Sri Lanka's leading experts on the PDPA. She brings deep knowledge of privacy law and a practical eye for how organisations can apply it.

Prabath Ariyarathna
Co-founder and Chief Product Officer of X-Venture, leading the product vision behind Xapi. An expert in enterprise architecture, Data, API and AI governance, he helps organizations turn compliance requirements into practical implementation.
Event Details
Date
- Thursday, 5 November 2026
Time
- 8.30 AM to 2.00 PM
Venue
- Cinnamon Life
Format
- In-person Executive Implementation Briefing
Entry
- By invitation only
Seats
- Limited. Registration is subject to confirmation.
Agenda
8:30
to 9:30 am
Arrival & Registration
9:30
to 10:30 am
Xapi Keynote: From Compliance to Confidence
10:30
to 10:50 am
Assess. Know Your Gaps
10:50
to 11:10 am
Implement. From Roadmap to Reality
11:10
to 11:30 am
Sustain. Compliance Beyond Day One
11:30
to 12:30 pm
Leadership Panel: PDPA in Practice
12:30
to 2.00 pm
Networking Lunch


