Suggested Amendments to the Online Safety Act No 09 of 2024 – A Primer


Posted by on August 19, 2025  /  0 Comments

On 13th August, a public notice calling for comments on the Online Safety Act No 09 of 2024 (“OSA”) and the proposed amendments published in July 2024 was released. It is a welcome move since the OSA was not open for public consultation in the past. While there are many aspects that warrant a review, here is a short summary of a few clauses that need amendments.

Online Safety Commission

Section

Criticism

Recommendation

Reason for recommendation / amendment

Section 5- Appointment of the members of the Commission

The provision states that appointment will be made by President “subject to the approval of the Constitutional Council”. This could lead to confusion and interpretation that the approval is a mere formality.

It is recommended that the appointment be made by the President “on recommendation of the Constitutional Council”.

The current wording could lead to an interpretation that the approval is a mere “after the fact / ex-post” formality.

 

Review of Offences under the OSA

Section & Offence

Criticism

Recommendation

Reason for recommendation / amendment

Section 12 – Prohibition of communication of false statements in Sri Lanka

Vagueness: terms like “promotes feelings of ill-will and hostility”

Define “false statement” precisely, including objective criteria

Reduces risk of arbitrary enforcement and protects lawful expression

Section 13 – Communication of false statement amounting to contempt

Duplication: Already addressed under Contempt of a Court, Tribunal or Institution Act, No. 8 of 2024 (CCA);

Under the CCA “publish” includes dissemination through “the internet or other online communication system”

Note – The 2024 proposed amendment included a reference to “Judicature Act No 2 of 1978”

Repeal this section; rely on CCA provisions

Avoids legislative overlap and confusion.

Section 14 – Wantonly giving provocation by false statement to cause riot

Duplication: Covered under Penal Code

Merge with Section 12 definition of “false statement”

Streamlines offences and avoids redundancy/ repetition.

Section 15 – Disturbing a religious assembly

Duplication: Could be handled under general “false statement” offences

Merge into Section 12 offence

Prevents unnecessary proliferation of separate offences

Section 16 – Deliberate and malicious communication of false statement to outrage religious feelings

Vagueness: includes terminology like “outraging religious feelings” which is wide and vague

Repeal section; rely on well-defined “false statement” offence

Protects expression; avoids subjective enforcement

Note the proposed amendments of 2024 also called for the repeal of this provision.

Section 17 – Online Cheating

Duplication: Penal Code already addresses cheating

Either –

1. Consider an amendment to the Penal Code to explicitly reference cheating in the online space (note that such a reference is not needed as the Penal Code is not restrictive and is technology neutral)

Or

2. Amend the provision to reflect the intent behind the provision.

Avoids redundancy while addressing modern online threats

Section 18 – Online Cheating by personation

Duplication: Covered by Penal Code

Amend Penal Code OR redraft to capture unique online impersonation harms

Avoids redundancy while addressing modern online threats

Section 19 – Circulating false report with intent to cause mutiny/offence against the State

Vagueness and duplication: terms like “alarm to the public” are unclear; already addressed under OSA false statement provisions

Repeal section

Eliminates overlap and restrictions that are vague.

Note the proposed amendments of 2024 also called for the repeal of this provision.

Section 20 – Communicating statements to cause harassment

Vagueness: wide definitions of “private information” and “harassment”; protection limited to “private information” and not “private communication”.

It appears that the intent behind provision was to provide protection against misuse and abuse of private information.

Amend to focus on “non-consensual sharing of intimate or private images and communication”.

Provides targeted protection against image / text -based abuse

Section 21 – Child Abuse

Narrow scope: only cross-references Penal Code; does not address modern online harms

Amend to include offences like deepfake child sexual abuse material

Enhances child protection in the online environment

Section 22 – Making or altering bots to commit an offence

Overbroad: Definition of “bot”*1 overly broad; could capture legitimate tools (e.g., customer service chatbots, research automation). Intent threshold unclear; Technology neutrality concern — risks becoming outdated as tech evolves.

Narrow scope to bots primarily designed or knowingly altered for committing offences. Clarify intent requirement. Use technology-neutral language to future-proof provision. For example – “automated tools, including but not limited to bots”

Prevents overreach to lawful automation; ensures focus on malicious actors; avoids redundancy and maintains relevance as technology changes.


Primer authored by Ashwini Natesan, Legal Consultant / Research Fellow – Technology, Media and Telecommunications Law


*1 “bot” means a computer program made or altered for the purpose of running automated task

Comments are closed.