ImplementingRegulationPersonalDataProtectionLaw
Art. 28Status unknownSaudi ArabiaRegulation
Issued by Saudi Data & AI Authority / NDMO
Purposes
1- Controller shall obtain Consent from a targeted recipient before sending advertising
or awareness material in case of the absence of a prior interaction between the
Controller and the targeted recipient.
2- Conditions for obtaining the targeted recipient's consent for advertising or awareness
materials shall be as follows:
a) Consent shall be given freely, and no misleading methods shall be used to obtain
it.
b) Targeted recipient shall be enabled to specify the options related to advertising or
awareness material subject to consent.
c) Consent of a targeted recipient shall be documented in a manner allowing future
verification.
3- Without prejudice to the Telecommunication and Information Technology Act or any
other related laws, before using communication methods for the purpose of sending
Public
advertising or awareness material, including via postal and electronic addresses of
the Data Subject, the Controller shall commit to the following:
a) Clearly mention sender's name without hiding their identity.
b) Provide a mechanism that enables the Data Subject to halt reception of advertising
and awareness materials when desired, and ensure that the procedures to halt the
of reception of such material are as simple and easy as the procedures to the
obtain consent to receive the material.
c) Immediately halt sending advertising or awareness material upon request from
targeted recipient.
d) Halting reception of advertising or awareness material shall be free of charge.
e) Keep material evidence of consent from the targeted recipient to receive
advertising or awareness material.
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded