Sri Lanka has enacted a comprehensive set of cyber laws that are broadly comparable to legislation found in many other countries around the world, yet weak implementation and critically low levels of public awareness continue to leave ordinary citizens dangerously exposed to the growing threat of cybercrime. This stark warning came from Dr. Sunil Abeyratne, Chair of the ICT Lawyers' Guild, who addressed a media briefing held in Colombo, calling on authorities to take urgent and meaningful action to bridge the widening gap between legislation on paper and justice in practice.
Laws Are in Place, But Implementation Falls Short
According to Dr. Abeyratne, Sri Lanka has over the years enacted a range of legal frameworks designed to address cybercrime and digital misconduct. These laws, he noted, are not fundamentally inferior to those found in more technologically advanced nations. The foundational architecture of cyber legislation exists, and in many respects, it reflects international standards and best practices that have been adopted globally to combat digital threats.
However, the Chair of the ICT Lawyers' Guild was unequivocal in his assessment that having laws on the books is only half the battle. The real challenge, he emphasized, lies in enforcement. Law enforcement agencies, prosecutors, and the judiciary must all be adequately equipped — both in terms of technical knowledge and institutional resources — to handle cybercrime cases effectively. Without that capacity, even the most well-drafted legislation becomes little more than symbolic.
Dr. Abeyratne pointed out that many cybercrime complaints filed by citizens fail to result in meaningful legal outcomes, not because the law does not provide a remedy, but because the mechanisms for investigation and prosecution remain underdeveloped. This enforcement gap, he argued, emboldens cybercriminals and erodes public trust in the legal system's ability to protect digital rights.
Public Awareness Remains a Critical Weakness
Beyond the enforcement deficit, Dr. Abeyratne highlighted another deeply concerning issue: the alarmingly low level of public awareness surrounding cyber laws and digital rights in Sri Lanka. A significant portion of the population remains unaware of what constitutes a cybercrime, what legal protections are available to them, or how to seek recourse when they become victims of online offences such as fraud, harassment, identity theft, or data breaches.
This lack of awareness creates a compounding problem. Citizens who do not know their rights are less likely to report incidents, which in turn results in underreporting of cybercrime statistics. Underreporting then feeds into a cycle where policymakers and law enforcement agencies may not fully appreciate the scale of the problem, leading to insufficient resource allocation and inadequate policy responses.
The ICT Lawyers' Guild Chair called for robust, sustained public education campaigns that would help everyday Sri Lankans understand the digital legal landscape. Schools, universities, community organizations, and media outlets all have a role to play in disseminating this critical information, he said, urging a collaborative national effort rather than leaving the responsibility solely to government institutions.
The Growing Threat of Cybercrime in the Digital Age
Sri Lanka, like many developing nations, has experienced a rapid expansion of internet connectivity and smartphone usage over the past decade. While this digital growth has brought enormous economic and social benefits, it has also dramatically expanded the attack surface for cybercriminals. Online scams, phishing attacks, social media harassment, financial fraud, and unauthorized data access have all become increasingly common concerns for Sri Lankan internet users.
The consequences of cybercrime extend far beyond individual victims. Businesses suffer financial losses and reputational damage. Government institutions face threats to critical infrastructure and sensitive data. The broader economy is impacted when digital trust erodes and users become reluctant to engage in online commerce or digital financial services. Addressing cybercrime effectively is therefore not merely a legal issue — it is an economic and national security imperative.
Calls for Systemic Reform and Capacity Building
Dr. Abeyratne and the ICT Lawyers' Guild are calling for a multi-pronged approach to strengthening Sri Lanka's cyber law ecosystem. This includes investing in the technical training of police officers and investigators who handle cybercrime cases, developing specialized cyber courts or dedicated units within the existing judicial system, and fostering greater cooperation between government agencies, the private sector, and civil society organizations.
International collaboration was also highlighted as an important dimension of any effective cyber law strategy. Given the cross-border nature of much cybercriminal activity, Sri Lanka must strengthen its partnerships with foreign law enforcement agencies and align its legal frameworks with international conventions where applicable.
Conclusion
Sri Lanka stands at a critical juncture in its digital journey. The legal foundation to combat cybercrime exists, and that is an achievement worth acknowledging. But as Dr. Sunil Abeyratne and the ICT Lawyers' Guild have made abundantly clear, laws without enforcement are hollow promises. Protecting Sri Lankan citizens in an increasingly connected world demands urgent investment in implementation capacity, institutional reform, and a nationwide commitment to digital literacy and legal awareness. The time for action is now.