New

PeoplesHR now comes in three clear packages for you to know exactly what you're buying 💸 View Packages

WEBINAR SUMMARY · FINANCE & PAYROLL

Payroll panic starts at the attendance device: a risk clinic for attendance data and PDPA compliance

FORMATOn-demand webinar
LENGTH69 min
CONDUCTED ONWed, 7 October 2026
LANGUAGEEnglish

Two clinics in one session. Kapila Gajapala traces payroll errors back to attendance devices, approvals and access, and shows how to catch them early. Mahinda Pathirana, Chief Information Security Officer, explains what Sri Lanka's Personal Data Protection Act asks of HR, and how to be ready for an audit tomorrow.

WATCH THE RECORDING AND LEARN HOW TO

1. Fix attendance problems before payroll cut-off

2. Keep devices, access and exits in sync with HR

3. Get HR data ready for a PDPA audit

Key takeaways

Watch from 08:22

Payroll errors start with attendance. Incomplete records, late overtime and leave approvals, and missing punches all end up on the payslip. Approve and fix yesterday’s records today instead of in a rush before cut-off.

Watch from 14:29

Plan the month on a calendar. Set clear cut-off dates and times for leave, attendance checks and approvals, so the whole month leads calmly to payroll day.

Watch from 18:33

Give employees back the transparency. Punch cards once showed every worker their own hours. Kiosks and the mobile app let employees check attendance, overtime and leave before payroll runs, so errors are caught early.

Watch from 20:35

Monitor devices before the morning rush. A dashboard shows which devices are online, and email or SMS alerts flag problems early. A responsibility matrix makes it clear who fixes power, network or device faults.

Watch from 27:43

Sync device access with HR. Link devices to the HR system so transfers move fingerprints to the new branch, and leavers are removed on their exit date, not left with access to the premises.

Watch from 42:01

Classify your data before the auditor asks. Sri Lanka's PDPA expects HR to classify and label data, control who can access it, train staff, use MFA and single sign-on, encrypt data and log changes to confidential records.

What we covered

Pick a time to play the recording from that moment, right here on the page.

02:10

Why payroll day brings panic

Last-minute corrections, salary queries and the same problems every month.
06:18

Three hours before cut-off

Missing records, pending approvals and one small correction after another.
08:22

Five attendance problems that hit payroll

Incomplete capture, late approvals and missing punches.
12:27

Proactive device checks

Device health, connectivity and routine maintenance.
14:29

A monthly payroll calendar

Cut-off dates that keep the month on track.
17:31

From punch cards to transparency

What employees lost when attendance went digital.
18:33

Employee self-checks

Kiosks for frontline workers and the mobile app for everyone else.
20:35

Device monitoring and alerts

A live dashboard and early-morning SMS or email alerts.
24:40

Who is responsible?

A responsibility matrix for power, network and device faults.
27:43

Enrollment, transfers and exits

Moving and removing access automatically from the HR system.
30:45

Access controls

Locking doors by shift and blocking a seventh consecutive day.
33:48

Power, cabling and surge protection

Why installations drift from standards, and a six-monthly checklist.
35:54

The PDPA compliance clinic

Could HR produce the evidence if an audit happened tomorrow?
38:57

Where Sri Lanka stands

Moving from moderate to robust data governance.
41:00

Data as an asset

Confidentiality, integrity and availability across product, people and procedures.
42:01

Classify and label your data

Public, internal, confidential and restricted, and the steps to get there.
49:10

Authentication and access

MFA, single sign-on, account locks and privileged access reviews.
53:16

Data in transit and at rest

Securing every step of the data journey.
56:21

Audit trails and sharing data

Logging changes, and why Excel, WhatsApp and public drives are risky.
58:25

AI risks and staying updated

Training, periodic reviews and the PeoplesHR Trust Portal.
60:26

Your audit-ready checklist

The six things to have in place from today.
61:26

Audience Q&A

Kiosk payslips, anonymizing leavers, safe storage and who audits PDPA.

Q&A highlights

Kiosks can be fitted with a printer. Workers log in with their fingerprint or face and print their payslip, much like using an ATM.
Employee records are kept for seven years to meet legal requirements, then moved to cold storage. Once an employee is made inactive, only a designated administrator can view their data, and it is removed from attendance devices.
Use internal or licensed storage with encryption and data labeling, covered by an agreement with the provider, and encrypt communication channels with HTTPS and TLS.
Sri Lanka's Data Protection Authority, which was recently established, is responsible for auditing organizations.
Yes. The cloud versions comply with the PDPA, and every release is updated to keep up with regional and global requirements.

Resources from the session

RESOURCE · SECURITY
PeoplesHR Trust Portal
Security policies, certifications and compliance updates, kept current for each region.
Visit the portal →

Make payroll day a calm one

Watch the full session, or talk to PeoplesHR about attendance tracking and data protection built into HR.