Anti-Corruption Reforms: Compliance Checklist for Sri Lankan Corporates 2026

As Sri Lankan businesses navigate a landscape shaped by the Anti-Corruption Act No. 9 of 2023 and the upcoming National Anti-Corruption Action Plan 2025-2029, staying compliant isn't just smart—it's essential for survival.Corporate compliance now demands proactive steps to avoid crippling fines, reputational damage, and investigations by the Commission to Investigate Allegations of Bribery or Corruption (CIABOC). We've put together this practical checklist to help your company align with Sri Lanka anti-corruption business reforms, drawing on the latest 2026 developments.

Why Anti-Corruption Compliance Matters for Sri Lankan Corporates

Corruption has long plagued our economy, from public procurement delays to private sector bribery that erodes investor trust. Sri Lanka's ranking slipped to 115th in the global corruption perceptions index by 2023, prompting urgent reforms.^[1] The IMF has tied governance improvements to economic recovery, making robust anti-corruption measures vital for accessing international funding and boosting our global standing.^[4]

The Anti-Corruption Act No. 9 of 2023 marks a game-changer, expanding CIABOC's powers to probe private sector offences like asset concealment, trading in influence, and failure-to-prevent corruption.^[2] Unlike the outdated Bribery Act of 1954, which focused on public officers, this law holds companies accountable—even state-owned enterprises (SOEs) contracting with the government.^[2] With the National Anti-Corruption Action Plan 2019-2023 ending in December 2025, CIABOC is now consulting stakeholders for the 2025-2029 plan, emphasising private sector compliance and civic education.^[1][6]

For corporates, non-compliance risks fines, officer imprisonment up to seven years, asset confiscation, and blacklisting from tenders. We've seen high-profile cases where only minor officials faced conviction, fueling perceptions of a "spider's web" justice system—small fry caught, big fish escape.^[8] Don't wait for CIABOC to knock; build defences now.

Key Legal Framework: What Sri Lankan Businesses Must Know

Core Laws Driving 2026 Reforms

• Anti-Corruption Act No. 9 of 2023: Criminalises bribery, extortion, illicit enrichment, and corporate failures to prevent these. CIABOC can demand asset declarations and audit systems.^[2]
• Bribery Act No. 11 of 1954 (as amended): Covers active/passive bribery, with penalties up to seven years' imprisonment and fines exceeding LKR 5,000 for individuals; fines for companies.^[5]
• Penal Code (Sections 158-161): Punishes public servant bribery with up to three years' jail or fines.^[5]
• Declaration of Assets and Liabilities Law: Mandates annual declarations for officials, with CIABOC oversight extending to private dealings.^[3]

National Anti-Corruption Action Plan 2025-2029

Launched in early 2026, this plan integrates public, private, and civic efforts under the "Clean Sri Lanka" programme. It aligns with UN Convention Against Corruption (UNCAC) obligations, focusing on enforcement gaps and beneficial ownership registries.^[1][6][7] Corporates in sensitive sectors like construction, procurement, and exports face heightened scrutiny.

Your 2026 Compliance Checklist: Step-by-Step Guide

Here's a practical, actionable checklist tailored for Sri Lankan firms. Implement these to meet CIABOC expectations and benchmark against global standards like the UK Bribery Act.

1. Develop a Robust Anti-Bribery Policy

• Draft a clear, written policy prohibiting bribery, facilitation payments, and gifts with corrupt intent. Define scope for employees, agents, and third parties.^[2]
• Include a "failure to prevent" clause, holding the company liable unless adequate procedures are proven.
• Get board approval and communicate island-wide via training sessions in Sinhala, Tamil, and English.

2. Conduct Risk Assessments

1. Map high-risk areas: public tenders, customs clearance, licensing from divisional secretariats.
2. Evaluate third-party risks—agents in infrastructure projects or suppliers in apparel exports.
3. Update annually or post-reform, like the 2025-2029 Plan.^[1]

3. Implement Training and Awareness Programmes

• Mandatory annual training for all staff, with modules on spotting red flags like unusual cash demands.
• Target directors and procurement teams, using CIABOC case studies from local convictions.^[8]
• Track completion via HR software, aiming for 100% compliance.

4. Establish Secure Whistleblower Channels

Create anonymous hotlines (e.g., via apps or toll-free numbers) protected from retaliation. While whistleblower laws lag, this demonstrates good faith to CIABOC.^[3] Log all reports and investigate promptly.

5. Due Diligence on Third Parties

• Screen agents, JV partners, and suppliers against CIABOC's blacklist and PEP lists.
• Include anti-bribery clauses in contracts, with audit rights.
• For SOEs or government contractors, align with Verité Research guidelines.^[2]

6. Monitor Procurement and Financial Controls

Segregate duties in purchasing, require three quotes for tenders over LKR 1 million, and audit high-value deals. Integrate with Prevention of Money Laundering Act for FATF compliance.^[7]

7. Board Oversight and Reporting

• Appoint a compliance officer reporting directly to the board quarterly.
• Maintain records of due diligence, training, and incidents for CIABOC inspections.
• Declare assets if requested; non-compliance triggers probes.^[2]

8. Periodic Audits and Updates

Engage external auditors yearly to test controls. Review policies against new CIABOC guidance or the 2025-2029 Plan.^[6]

Pro Tip for Locals: Smaller firms in Colombo or Kandy can start with free CIABOC templates; larger ones in export zones should consult firms like Desaram & Co. for tailored advice.^[2]

Common Pitfalls and How to Avoid Them

Many Sri Lankan corporates trip on "facilitation payments" to speed up bureaucracy—no distinction exists in law, so treat them as bribes.^[3] Nepotism in hiring or cronyism in awards invites CIABOC raids. Real example: Recent probes into SOE procurement exposed weak oversight, leading to executive dismissals.^[2]

"Enforcement agencies face capacity constraints, but the direction of reform is unmistakable." — Insights on Sri Lanka's corporate liability landscape.^[2]

Avoid by documenting every decision and training staff on ethical alternatives, like digital portals for clearances.

Benefits of Proactive Compliance

Beyond dodging penalties, strong programmes attract FDI, secure IMF-linked loans, and enhance tender wins. They're evidentiary in defences and signal reliability to partners in the EU or US.^[2][4]

FAQ: Sri Lanka Anti-Corruption Business Queries

Q1: Does the Anti-Corruption Act apply to private companies?
A: Yes, it covers private sector bribery, unlike the old Bribery Act. CIABOC can investigate failures to prevent corruption.^[2]

Q2: What penalties face non-compliant corporates in 2026?
A: Fines, up to seven years' imprisonment for officers, asset seizures, and contract bans.^[5]

Q3: How does the 2025-2029 Plan affect businesses?
A: It mandates private sector alignment, with CIABOC monitoring compliance frameworks.^[1][6]

Q4: Is a compliance programme a full defence?
A: Not absolute, but it holds evidentiary value in proving "adequate procedures."^[2][5]

Q5: Where can we get CIABOC guidance?
A: Visit ciaboc.gov.lk for policies, training resources, and the new Action Plan.^[1]

Q6: How to handle whistleblower reports?
A: Investigate confidentially, protect reporters, and report serious cases to CIABOC.^[3]

Next Steps: Get Compliant Today

Start with a risk audit this quarter—use our checklist as your roadmap. Consult CIABOC or legal experts for bespoke plans. By embedding these reforms, you'll not only meet Sri Lanka anti-corruption business standards but help build the ethical economy President Dissanayake envisions.^[8] Contact Lanka Websites for compliance website builds to showcase your commitment transparently.

Sources & References

1. The First Phase Launched to Gather Views and Suggestions for the National Anti-Corruption Action Plan 2025-2029 — ciaboc.gov.lk^[1]
2. Sri Lanka Corporate Crime Laws | Anti-Corruption Act Insights — desaram.com^[2]
3. Sri Lanka Country Risk Report — ganintegrity.com^[3]
4. World Report 2026: Sri Lanka | Human Rights Watch — hrw.org^[4]
5. Sri Lanka | Lex Mundi Anti-Corruption Guide — lexmundi.com^[5]
6. National Anti-Corruption Action Plan 2025-2029 — cabinetoffice.gov.lk^[6]
7. Civil Society Report by Transparency International Sri Lanka — uncaccoalition.org^[7]
8. Let Us Unite to Transform Sri Lanka into a Nation with Minimal Corruption — presidentsoffice.gov.lk^[8]