CertificatesControllersProcessorsAuditingInspectionPersonalDataProcessingActivities

The Applicant shall meet the following requirements: 1. The Applicant shall be a legal entity independent of any other entity under the Kingdom’s regulations and shall have an establishment in the Kingdom. 2. The means of communication adopted for the Licensee shall include the entity’s legal name, the address of its establishment, and the commercial registration or foreign investor license number. 3. The Applicant shall have the technical tools and qualified personnel necessary to issue accreditation certificates or to conduct audits or inspections in accordance with the provisions of the Law, the Regulations, and the mechanism and standards determined by the Competent Authority. 4. Obtaining accreditation for granting certificates from the Saudi Accreditation Center if the license application is related to issuing accreditation certificates. 5. An applicant for a license to issue accreditation certificates shall have the following: A. The applicant’s capital shall not be less than ten (10) million Saudi riyals. B. The applicant shall have no fewer than ten (10) evaluation employees, all of whom must be directly employed by the applicant under employment contracts. C. Some evaluation employees shall have at least five (5) years of experience in personal data protection practices, evaluation work, or any related field, as determined by the Competent Authority. D. Evaluation employees shall complete specialized courses or pass specialized tests determined and prepared by the Competent Authority. 6. Any other requirements determined by the Competent Authority, in accordance with the provisions of the Law, the Regulations, and any document issued by the Competent Authority regarding the application of the provisions of the Law and the Regulations. 7. The Competent Authority may, at its discretion and based on the circumstances, exempt the applicant from any of the above requirements. Chapter Three: Licensing Procedures