Detailed overview
Sri Lanka does not currently have a comprehensive AI Act. Its AI framework is being developed through the National Strategy on Artificial Intelligence, public consultation, digital-government policy, data governance and existing laws.
Sri Lanka's draft National AI Strategy was opened for public consultation by the Ministry of Digital Economy. The stated vision is to create a digitally empowered Sri Lanka through responsible AI development and adoption, and to position the country as a regional AI hub while strengthening competitiveness and economic resilience.
The strategy is guided by seven principles: inclusivity and responsibility, trustworthiness and transparency, human-centricity, adoption-focus and impact-orientation, agile and adaptive governance, collaboration and global engagement, and sustainability and future-readiness. These principles are intended to guide both public-sector and private-sector AI adoption.
Sri Lanka's AI strategy focuses on three practical areas. First, it seeks to strengthen foundational enablers such as data, skills, infrastructure, research and development, and public awareness. Second, it seeks to accelerate AI use through public-sector transformation and private-sector stimulation. Third, it seeks to ensure safe and trustworthy AI through iterative governance, responsible practices and public engagement.
Until a binding AI law is adopted, AI compliance in Sri Lanka depends on existing rules. AI systems may trigger personal-data protection, cybersecurity, consumer protection, financial regulation, healthcare regulation, employment law, public-sector procurement, intellectual-property law or criminal law.
Sri Lanka does not currently have one AI-specific penalty table. Penalties depend on the underlying law breached and the sector in which the AI system is developed or used.
Practical requirements & details
Sourced from the draft National Strategy on Artificial Intelligence opened for public consultation by the Ministry of Digital Economy.
Seven guiding principles
- Inclusivity and responsibility.
- Trustworthiness and transparency.
- Human-centricity.
- Adoption-focus and impact-orientation.
- Agile and adaptive governance.
- Collaboration and global engagement.
- Sustainability and future-readiness.
Three practical areas
- Foundational enablers — data, skills, infrastructure, R&D and public awareness.
- AI uptake — public-sector transformation and private-sector stimulation.
- Safe and trustworthy AI — iterative governance, responsible practices and public engagement.
Existing-law overlays
- Until a binding AI law is adopted, AI may trigger personal-data, cybersecurity, consumer, financial, healthcare, employment, public-sector procurement, IP or criminal law.
Penalties
- No AI-specific penalty table.
- Penalties depend on the underlying law breached and the sector in which the AI system is developed or used.