Nawaloka Hospitals Data Protection Officer Vacancies 2026
Nawaloka Hospitals PLC is seeking a qualified and ethical Data Protection Officer (DPO) to lead its data privacy and compliance initiatives. The selected officer will help ensure compliance with Sri Lanka’s Personal Data Protection Act while safeguarding patient, employee and organizational data.
Nawaloka Hospitals Data Protection Officer Vacancies 2026
| Conducted by | Nawaloka Hospitals PLC |
| Closing Date | 31/07/2026 |
| Location | Colombo, Sri Lanka |
| Duration | Full Time |
| Paper Notice – English | Download PDF |
| Instructions to Guidelines |
Email updated CV to dgmnnh@sltnet.lk with subject line “Application for the Post of Data Protection Officer (DPO)” |
| More Information |
Click Here |
| Source | Nawaloka Hospitals PLC |
| Join Whatsapp Channel | Click Here |
| Join Facebook Page | Click Here |
Required Qualifications
- Attorney-at-Law of the Supreme Court of Sri Lanka with active professional standing.
- LL.B Degree from a recognized university or successful completion of Sri Lanka Law College examinations.
- Approximately 3–5+ years of post-qualification experience in corporate legal work, regulatory compliance, data privacy or a reputable law firm.
- Strong knowledge of the Personal Data Protection Act, No. 9 of 2022, its amendments including Act No. 22 of 2025, and related regulations.
- Excellent legal drafting, analytical, negotiation and stakeholder-management skills.
- High ethical standards and the ability to independently advise senior management on compliance and data-privacy matters.
- Strong attention to detail when handling confidential information and maintaining compliance documentation.
Key Responsibilities
- Develop and manage the organization’s Data Protection Management Programme (DPMP).
- Ensure compliance with the Personal Data Protection Act (PDPA).
- Conduct Data Protection Impact Assessments (DPIAs) and privacy-risk assessments.
- Advise management on data privacy, governance and regulatory compliance.
- Manage data-subject requests and data-breach response processes.
- Review contracts, vendor agreements and data-processing arrangements.
- Maintain Records of Processing Activities (ROPA).
- Liaise with the Data Protection Authority of Sri Lanka.
- Conduct privacy-awareness and staff-training programmes.
How to Apply
Eligible applicants should send their updated CV by email. Mention the following wording in the email subject line:
Closing Date
A closing date is not mentioned in the published advertisement. Interested candidates are advised to apply as early as possible.