It excludes public disclosure of personal data or using it for “professional, non-profit or commercial activity.” What organizations have to comply with the Saudi data privacy law? The PDPL is extraterritorial, and both private and public organizations processing personal data of Saudi Arabia’s...
KSA published law and Regulations on data protection, the Personal Data Protection Law(PDPL) and the Personal Personal Data Protection Interim Regulations(PDPIR). It aims to ensure the privacy of personal data, regulate data sharing, and prevent the misuse of personal data, which makes a promine...
In an era where data is as valuable as gold, the introduction of the Personal Data Protection Law (PDPL) by Saudi Arabia marks a significant milestone in the Middle East's approach to data privacy and security. Implemented through Royal Decree M/19 on September 17, 2021, and subsequent...
Data privacy law expert Zil Rehman of Pinsent Masons said, as a first step, business will need to select one of the ‘prescribed purposes’ for transferring data to a party outside the Kingdom under the law and the regulations. “The most business-friendly purposes are performing necessary op...
Privacy Law in Saudi Arabia: A Primer for BusinessesCourtney M Bowman
Regulator: The Saudi Data & Artificial Intelligence Authority (SDAIA). Summary: The PDPL was published in the Official Gazette on 24 September 2021 and marks the introduction of Saudi Arabia's first data protection law. The PDPL aims to ensure the privacy of personal data, regulate data shari...
If you have any Personal Data Protection Law concerns, or if we do not comply with the Personal Data Protection Law, you can file a complaint to the Data Governance Office using one of the following channels: Email: DGO-DPO@STA.gov.sa. If you are unsatisfied with how we process your ...
In most cases, we will keep your personal data only for as long as necessary to use it for the purposes that we tell you about. Sometimes, though, the law requires us to keep it for longer. Marketing We may send you information about Services or offers that you may be interested in...
4.3 Please briefly describe the sanctions that apply for failing to comply with your data privacy laws. PDPL penalties may be imposed on natural or legal persons and can include warnings, fines of up to SAR 5 million and confiscation. Penalties may be doubled in case of repetition. This com...
This “Kingdom of Saudi Arabia Personal Data Protection Law Series” addresses the following three aspects: 1- Part 1: A summary of the Personal Data Protection Law (“PDPL”); 2- Part 2: A summary of the Implementing Regulation of the PDPL (“Implement