Article 40

(1) A Licensee must keep a register in respect of each of its Controllers and update it within forty days of becoming aware of any changes. Accordingly, Controllers shall provide the Licensee with all necessary information to be included in the register, which includes (as a minimum) the following particulars: (a) Full name; (b) Current residential address; (c) Date and place of birth; (d) Nationality; and (e) Copy of current government identity document. (2) A Licensee shall send to SAMA an annual report identifying its Controllers in the mechanism and format set by SAMA. (3) A Licensee shall notify SAMA as soon as possible after it becomes aware of any significant changes in the conduct or circumstances of existing Controllers that may impact the fitness and propriety of a Controller or the ability of the Licensee to conduct its business properly.