ImplementingRegulationPersonalDataProtectionLaw
Art. 19Status unknownSaudi ArabiaRegulation
Issued by Saudi Data & AI Authority / NDMO
1- The Controller shall collect only the minimum amount of Personal Data necessary to
achieve the purpose of the Processing, and ensure the following:
a) Collecting only the necessary Personal Data that is directly related to the purpose
of Processing, and this shall be determined using appropriate means, including
data maps that indicate the need for each collected data and link it to each
objective of the Processing or other means.
b) Provide necessary care to achieve the purpose of the Processing without collecting
unnecessary Personal Data.
2- The Controller shall retain the minimal Personal Data necessary to achieve the
purpose of the Processing.
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded