Data Protection Officer

Data Protection Officer – Nawaloka Hospitals PLC

Job Overview

Nawaloka Hospitals PLC is seeking a sharp, proactive, and detail-oriented professional to support patient privacy and data protection compliance under Sri Lanka’s Personal Data Protection Act (PDPA) No. 9 of 2022. The selected candidate will work closely with the leadership, administrative, medical, and IT teams to establish and maintain effective data governance standards.

Required Qualifications

• Degree or formal qualification in Law (LL.B), Information Technology, Management, Cyber Security, or a related field.
• Prior experience in data privacy is not required, but a strong aptitude to learn, research, and understand complex regulatory guidelines quickly is essential.
• Willingness to work full-time at the Colombo office.
• Excellent organizational skills with a structured and detail-oriented approach.
• Strong written and verbal communication skills.
• Ability to coordinate effectively across diverse hospital departments.
• Candidates with a background in corporate compliance, legal auditing, quality assurance, or IT support who are interested in specializing in data protection are strongly encouraged to apply.

Key Responsibilities

• Learn and implement PDPA frameworks, rapidly understanding the requirements of the Personal Data Protection Act and applying them to day-to-day hospital operations.
• Work on-site with administrative, medical, and IT teams to oversee patient records, including physical and electronic records, pharmacy systems, and operational data.
• Assist in developing clear and practical privacy guidelines, staff protocols, and patient consent forms.
• Act as an internal point of contact for compliance matters and future interactions with the Data Protection Authority (DPA).
• Help train hospital staff, administrative officers, and department leads on proper data handling and privacy practices.
• Establish and maintain effective data governance and privacy standards across the organization.

How to Apply

Send your CV along with a brief cover letter outlining your capacity for rapid learning and relevant skills to:

Email: recruitment@nawaloka.com

Please mention “DATA PROTECTION OFFICER (DPO)” in the email subject line.