Assessing the legal compliance literacy gap in Sri Lankan IT professionals

Abstract

In the rapidly changing digital landscape, legal compliance has become an essential skill for Information Technology (IT) professionals, especially in developing economies like Sri Lanka. This thesis explores the legal compliance literacy of IT professionals in Sri Lanka, focusing on their knowledge and application of laws concerning data protection, intellectual property, and cybersecurity. The research uncovers a notable gap between the increasing need for legal adherence in the IT sector and the current level of legal awareness among professionals. Adopting a mixed-methods approach, the study combines quantitative survey data with qualitative insights from interviews to evaluate the state of legal compliance literacy. The results show that factors such as educational background, work experience, access to legal resources, and participation in specialized training programs play a significant role in shaping legal compliance literacy. The analysis indicates that while awareness of legal standards is growing, the practical implementation of these standards remains a challenge, particularly as technological advancements often outpace the development of corresponding legal frameworks. This thesis emphasizes the urgent need for strategic actions to improve legal compliance literacy among IT professionals in Sri Lanka. Recommendations include enhancing access to comprehensive legal resources, instituting mandatory and role-specific training programs, and incorporating legal education into IT curricula. These initiatives are vital for developing a more legally informed and ethically responsible IT workforce, which is crucial for minimizing legal risks and promoting the sustainable growth of Sri Lanka's IT industry.