This document is intended to understand the extant policy context in relation to healthcare data protection, providing international comparisons, and raise important questions for Sri Lanka to consider in relation to data protection, albeit within a narrow sector specific scope.