Advanced Certificate Course in Data Protection Law

The Advanced Certificate Course in Data Protection Law is a comprehensive 12-week programme designed to provide in-depth knowledge of legal frameworks governing data protection and privacy, with a focus on Sri Lanka’s Personal Data Protection Act (No. 9 of 2022) and international standards like the GDPR. Structured under SLQF Level 2, the course blends theoretical instruction with practical applications, covering key topics such as data subject rights, compliance frameworks, and enforcement mechanisms. Delivered in a hybrid format (online or on-campus), the programme employs interactive teaching methods, including lectures, seminars, and case studies, to equip legal and non-legal professionals with the skills to navigate data protection challenges. Assessment combines continuous evaluations (30%) and a final examination (70), with opportunities for merit or distinction based on performance. The course is ideal for junior executives, A-level students, and professionals seeking expertise in this evolving field.

Through this course, the Faculty aims to equip students with:

• A solid theoretical foundation in data protection laws, including Sri Lanka’s PDPA and international frameworks like the GDPR;
• Analytical skills to interpret and apply data protection principles to real-world scenarios;
• Practical competence in drafting privacy policies, compliance clauses, and legal documentation;
• Critical awareness of emerging challenges in data privacy, cross-border transfers, and enforcement mechanisms;
• The ability to evaluate the impact of data protection laws on businesses and governance, fostering informed decision-making.

Admission to the Advanced Certificate in Data Protection Law is open to individuals seeking foundational or specialized knowledge in data protection regulations. Applicants must meet the following minimum criteria:

1. Academic Qualification:
   • A General Certificate of Education (Ordinary Level) or equivalent, with a credit pass in English, OR
   • Any equivalent qualification demonstrating English language competency (as determined by the Department of Commercial Law).
2. Additional Considerations:
   • Prior knowledge of law is not required, making the course accessible to legal and non-legal professionals alike.
   • The Department reserves the right to interview applicants if deemed necessary.
3. Target Audience:
   The course is designed for:
   • Junior executives and officers in public/private sectors,
   • A-Level students exploring legal careers,
   • Self-employed professionals or entrepreneurs needing compliance knowledge,
   • Any individual seeking expertise in data protection laws (PDPA, GDPR, etc.).

1. Background and Introduction to Information Technology Law, E-Commerce, and Business (10 hours)
   • Introduction to IT Law (2 hours)
   • Law relating to the Business Environment in Sri Lanka (2 hours)
   • E-Commerce and E-Business (2 hours)
   • Cyber Security (2 hours)
   • Consumer Protection Law (2 hours)
2. Fundamentals of Personal Data Protection Act of Sri Lanka (6 hours)
   • Overview of PDPA (2 hours)
   • Key Provisions and Principles, with Comparison to International Laws (2 hours)
   • Introduction and Key Provisions of GDPR (2 hours)
3. Rights, Obligations, and Compliance Framework (6 hours)
   • Concept of Privacy and Data (2 hours)
   • Rights of Data Subjects (2 hours)
   • Fair Use and Practice (2 hours)
4. Role of Controllers, Processors, and Data Protection Authority (4 hours)
   • Responsibilities and Obligations (2 hours)
   • Role and Powers of DPA (2 hours)
5. Enforcement, Compliance, and Penalties (4 hours)
6. Impact of the Personal Data Protection Act on Businesses (4 hours)
   • Business Models and Strategies (2 hours)
   • Case Studies on Business Adaptations (2 hours)
7. Exemptions, Cross-Border Data Transfers, and Emerging Issues (6 hours)
8. Practical Component: Drafting Clauses, Privacy Notices, and Policies (4 hours)
9. Revision and Feedback (4 hours)

Local candidates-       65,000/=

Application forms for the Advanced Certificate in Data Protection Law can be downloaded from the Faculty of Law website at www.law.cmb.ac.lk.

Applicants are required to pay a non-refundable application fee of LKR 1,500/-. This payment should be made at any branch of People’s Bank to the credit of the “Main Collection Account of the University of Colombo” (Account Number: 086100161189655) using the Reference Number 3100170.

Once the payment is made, applicants must submit the following documents:

• The duly filled application form

• A duplicate of the bank payment slip

• A copy of the applicant’s National Identity Card

• Certified copies of relevant certificates

These documents should be sent either:

• By registered post to:
  Coordinator (ACDPL), Department of Commercial Law, Faculty of Law, University of Colombo, Philip Gunawardana Mawatha, Colombo 07,
  or

• By email to: acdpl@law.cmb.ac.lk

Important:
Please clearly mention the course name (Advanced Certificate in Data Protection Law) on the top left-hand corner of the envelope if posting, or in the subject line of the email if applying electronically.