1. Institutional Mandate & Scope
The 'Ratama Ekata' (A Nation United) platform operates under the direct authority of the Presidential Secretariat of Sri Lanka. This policy establishes our legal commitment to safeguarding personal data in accordance with the Constitution of Sri Lanka and the Personal Data Protection Act No. 9 of 2022 (PDPA). It governs all digital touchpoints, hotlines, and field reporting systems.
2. Data We Collect & Methods
We collect only the minimum data required to protect public safety, execute targeted anti-drug interventions, and coordinate voluntary rehabilitation services across Sri Lanka.
Incident locations, suspected drug activity types, descriptions, and uploaded photographic or documentary evidence. Submitting personal identifiers (name, telephone number, national identity number) is strictly voluntary.
Intake inquiries, family support requests, and clinical referral notes processed under medical confidentiality standards in collaboration with certified treatment centres.
Device type, masked IP addresses, session duration, and chosen language (Sinhala, Tamil, English) collected automatically solely for security, DDoS prevention, and load optimization.
3. Absolute Whistleblower Protection & Anonymity
Whistleblowers and reporting citizens are granted ironclad legal anonymity. Anonymous submissions receive identical operational attention as attributed reports. All incoming report data is compartmentalized, encrypted via military-grade AES-256 at rest, and stripped of tracking identifiers before intelligence evaluation.
4. Authorized Inter-Agency Data Sharing Protocol
Verified actionable intelligence is relayed strictly on a classified 'need-to-know' basis to designated state agencies: Sri Lanka Police Narcotic Bureau (PNB), Special Task Force (STF), and the National Dangerous Drugs Control Board (NDDCB). Data is never commercialized, monetized, or shared with private entities.
5. Sovereign Data Storage & Retention
All citizen records are stored securely within sovereign Government of Sri Lanka data centers and certified government cloud infrastructure. Data in transit is protected using TLS 1.3 protocol. Records are retained strictly as required by law and expunged following case closure.
6. Citizen Rights Under the PDPA
Under the Personal Data Protection Act No. 9 of 2022, every citizen has the right to request access to their personal data held by public authorities, request correction of inaccurate records, withdraw voluntary consent at any time, and submit formal grievances to the Data Protection Authority.
7. Data Protection Officer & Inquiries
For inquiries regarding data handling or to submit a statutory data subject request, please contact our designated privacy desk:
