International in scope and interdisciplinary in approach

Barlow JP (1996) A declaration of the independence of Cyberspace. Electronic Frontier Foundation. Available at: https://www.eff.org/cyberspace-independence (accessed 26 October 2022).

Basu A (2020) The retreat of the data localization brigade: India, Indonesia and Vietnam. The Diplomat, 10 January. Available at: https://thediplomat.com/2020/01/the-retreat-of-the-datalocalization-brigade-india-indonesia-and-vietnam/ (accessed 26 October 2022).

Bradford A (2020) The Brussels Effect: How the European Union Rules the World. New York: Oxford University Press.

Cate FH Cullen P Mayer-Schonberger V (2013) Data Protection Principles for the 21st Century: Revising the 1980 OECD Guidelines. Microsoft Corporation. Available at: https://www.repository.law.indiana.edu/cgi/viewcontent.cgi?article=1022&context=facbooks (accessed 26 October 2022).

Creemers R Triolo P Webster G (2018) Translation: cybersecurity law of the People’s Republic of China (Effective June 1, 2017). New America. Available at: https://www.newamerica.org/cybersecurity-initiative/digichina/blog/translation-cybersecurity-law-peoples-republic-china/ (accessed 26 October 2022).

Dalfen CM (1970) Direct satellite broadcasting: towards international arrangements to transcend and marshal the political realities. The University of Toronto Law Journal 20(3): 366–374.

Das KN Spicer J (2016) How the New York Fed fumbled over the Bangladesh Bank cyber-heist. Reuters, 21 July. Available at: https://www.reuters.com/investigates/special-report/cyber-heist-federal/#:~:text=When%20the%20Federal%20Reserve%20Bank,%2481%20million%20to%20the%20Philippines (accessed 26 October 2022).

Dharmawardana KGS Lokuge JN Dassanayake PSB , et al. (2017) Predictive model for the dengue incidences in Sri Lanka using mobile network big data. In: 2017 IEEE international conference on industrial and information systems (ICIIS). Available at: https://lirneasia.net/2017/12/predictive-model-dengue-incidences-sri-lanka-mobile-network-big-data/ (accessed 26 October 2022).

Fernandez M Sanger DE Martinez MT (2019) Ransomware attacks are testing resolve of cities across America. The New York Times, 22 August. Available at: https://www.nytimes.com/2019/08/22/us/ransomware-attacks-hacking.html (accessed 26 October 2022).

Gao HS (2021) Data regulation in trade agreements: different models and options ahead. In: Smeets M (ed.) Adaption to the Digital Trade Era: Challenges and Opportunities. Geneva: WTO. Available at: https://ink.library.smu.edu.sg/sol_research/3351/ (accessed 26 October 2022).

Guidelines on the protection of privacy and transborder flows of Personal Data (1980) Organisation for Economic Co-operation and Development. Paris: OECD. Available at: https://www.oecd.org/digital/ieconomy/oecdguidelinesontheprotectionofprivacyandtransborderflowsofpersonaldata.htm (accessed 26 October 2022).

Jankowski N Jones S Samarajiva R , et al. (1999) Editorial. New Media and Society 1(1): 5–9.

Levy B Spiller PT (1994) The institutional foundations of regulatory commitment: a comparative analysis of telecommunications regulation. The Journal of Law, Economics, and Organization 10(2): 201–246.

McDonald A Cranor LF (2008) The cost of reading privacy policies. I/S: A Journal for Law and Policy for the Information Society. Available at: https://www.technologylawdispatch.com/wp-content/uploads/sites/26/2013/02/Cranor_Formatted_Final1.pdf (accessed 26 October 2022).

McGuinness D (2017) How a cyber attack transformed Estonia. BBC, 27 April. Available at: https://www.bbc.com/news/39655415 (accessed 26 October 2022).

Maldeniya D Lokanathan S Kumarage A (2015) Origin-Destination matrix estimation for Sri Lanka using mobile network big data. In: 13th international conference on social implications of computers in developing countries. Negombo. Available at: https://lirneasia.net/2015/05/origin-destination-matrix-estimation-sri-lanka-mobile-network-big-data/ (accessed 26 October 2022).

Personal Data Protection Act No 9 of 2022 (Sri Lanka).

Regulation (EU) (2016) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.’ Official Journal of the European Union 119: 1–88.

Samarajiva R (2022) Personal Data Protection Act passed: what will it mean? Daily FT, 22 March. Available at: https://www.ft.lk/columns/Personal-Data-Protection-Act-passed-What-will-it-mean/4-732307 (accessed 26 October 2022).

Samarajiva R Lokanathan S Madhawa K , et al. (2015) Big data to improve urban planning. Economic and Political Weekly 50(22): 42–48. Available at: https://www.epw.in/journal/2015/22/review-urban-affairs-review-issues/big-data-improve-urban-planning.html (accessed 26 October 2022).

Satariano A (2020) Europe’s privacy law hasn’t shown its teeth, frustrating advocates. The New York Times, 27 April. Available at: https://www.nytimes.com/2020/04/27/technology/GDPR-privacy-law-europe.html (accessed 26 October 2022).

Smythe D (1960) Space Satellite Communications and Public Opinion. Urbana, IL: Institute of Communication Research.