Privacy as a Competitive Advantage: How Robust Data Protection Laws Shape Global Economic Development, Comparative Analysis of Sri Lanka and European Union

In recent years, the concern for data protection has moved beyond being a mere technical matter to becoming a legally enforceable obligation that requires timely and responsive actions by modern legal discourse; especially given the current rate of digitalization and use of artificial intelligence, coupled with increasing cross border data movements. Hence, this research aims to evaluate the current state of the EU and Sri Lanka's data protection legal frameworks with respect to their effect on economic development. Thus, this research focuses primarily on identifying and evaluating the legal and structural shortcomings of Sri Lanka's Personal Data Protection Act No. 09 of 2022 (PDPA) as significant legislation that represents a significant step forward. Furthermore, this research evaluates the impact of interconnected phenomena such as globalization, privatization and competition on the governance of personal data and privacy within increasingly digitalized and competitive markets. By using a qualitative desktop research approach, the research utilizes both primary and secondary sources including legislation, academic literature, policies, and online resources to compare the data protection regimes of the EU and Sri Lanka in order to examine the implications of developing issues associated with artificial intelligence. Ultimately, the goal of this research is to provide a detailed understanding of the current state of data protection law and its economic impact, while providing practical and contextually appropriate recommendations to address the identified shortcomings of the PDPA through lessons learned from the European Union's GDPR in order to improve Sri Lanka's digital economy and promote sustainable economic growth.

Data Protection, GDPR, PDPA

1. Legislation [Google Scholar] [Crossref]

2. Personal Data Protection Act, No. 9 of 2022 (Sri Lanka). [Google Scholar] [Crossref]

3. European Union. (2016). General Data Protection Regulation (EU) 2016/679. [Google Scholar] [Crossref]

4. <https://eur-lex.europa.eu/eli/reg/2016/679/oj> [Google Scholar] [Crossref]

5. Journal Articles [Google Scholar] [Crossref]

6. Abeysekara, T. B., & Ranasinghe, A. E. (2022). Holistic approach in introducing proper legal framework to regulate data protection and privacy in Sri Lanka. Vidyodaya Journal of Management, 8(1). [Google Scholar] [Crossref]

7. <https://vjm.sljol.info/articles/89> [Google Scholar] [Crossref]

8. Clark, J. M. (1925). What is competition? Journal of Political Economy, 33(3). [Google Scholar] [Crossref]

9. <https://www.jstor.org/stable/2354777> [Google Scholar] [Crossref]

10. Nahalková, E., & Tesárová, A. (2021). The impact of globalization in connection with the development of e-commerce. SHS Web of Conferences, 92, Article 06007. [Google Scholar] [Crossref]

11. <https://www.shsconferences.org/articles/shsconf/abs/2021/40/shsconf_glob2021_06007/shsconf_glob2021_06007.html> [Google Scholar] [Crossref]

12. Nanayakkara, T. (2024). An analysis of privacy policies in Sri Lanka. University of Colombo Review (Series III), 5(21). <https://ucr.sljol.info/articles/158/files/6671137745092.pdf> [Google Scholar] [Crossref]

13. Scheuerer, S. (2021). Artificial intelligence and unfair competition – Unveiling an underestimated building block of the AI regulation landscape. GRUR International, 70(9). [Google Scholar] [Crossref]

14. <https://academic.oup.com/grurint/article/70/9/834/6178541> [Google Scholar] [Crossref]

15. Udu, A. A. (2016). Globalisation, privatisation and competition in the third world countries. International Journal of Business and Social Science, 7(4), 79–86. <https://ijbssnet.com/journals/Vol_7_No_4_April_2016/8.pdf> [Google Scholar] [Crossref]

16. Reports [Google Scholar] [Crossref]

17. Lyytinen, J., Lescrauwaet, B., Hekkert, M., Wagner, C., Cheng Yoon, A., & Sovacool, B. K. S. (2022). Adaptive legal frameworks and economic dynamics in emerging technologies: Navigating the intersection for responsible innovation. <https://www.researchgate.net/publication/375988655_Adaptive_Legal_Frameworks_andEconomic_Dynamics_in_Emerging_Technologies_Navigating_the_Intersection_for_Responsible_Innovation> [Google Scholar] [Crossref]

18. Web Pages [Google Scholar] [Crossref]

19. DigitalOcean. (n.d.). AI and privacy: Safeguarding data in the age of artificial intelligence. [Google Scholar] [Crossref]

20. <https://www.digitalocean.com/resources/articles/ai-and-privacy> [Google Scholar] [Crossref]

21. Hyseni, V. (n.d.). Data protection challenges. PECB. Retrieved November 15, 2024, from [Google Scholar] [Crossref]

22. <https://pecb.com/article/data-protection-challenges> [Google Scholar] [Crossref]

23. Kirk, N. (2022, March 30). Sri Lanka becomes the first South Asian country to pass comprehensive privacy legislation. WilmerHale. <https://www.wilmerhale.com/en/insights/blogs/wilmerhale-privacy-and-cybersecurity-law/20220330-sri-lanka-becomes-the-first-south-asian-country-to-pass-comprehensive-privacy-legislation> [Google Scholar] [Crossref]

24. Public–Private Partnership Legal Resource Center. (2024, October 11). Privatization laws. [Google Scholar] [Crossref]

25. <https://ppp.worldbank.org/public-private-partnership/legislation regulation/laws/privatization> [Google Scholar] [Crossref]

26. Yale School of Management. (2021, January 15). The benefits of privacy. Yale Center for Customer Insights. <https://som.yale.edu/blog/the-benefits-of-privacy> [Google Scholar] [Crossref]

• Conflict of Law in the Safeguarding of Malaysian Intangible Cultural Heritage: A Way Forward
• Alternative Dispute Resolution in India: A Brief Overview Justice Delayed is Justice Denied. - William E. Gladstone
• The Role of Museums in Safeguarding Cultural Heritage Rights: Balancing Access and Repatriation
• An Evaluation of the Universal Declaration of Human Rights' Significance and Application in Nigeria
• The Role of International Law in Shaping National Immigration Policies.