ImplementingRegulationPersonalDataProtectionLaw
Art. 29Status unknownSaudi ArabiaRegulation
Issued by Saudi Data & AI Authority / NDMO
1- Without prejudice to the Telecommunication and Information Technology Act or any
other related laws, before Processing Personal Data for Direct Marketing purposes,
the Controller shall abide by to the following:
a) Obtain consent from the Data Subject in accordance with the provisions of Article
(11) of this Regulation.
b) Provide a mechanism that enables the Data Subject to halt the reception of
marketing material whenever desired, and ensure that the procedure for halting
the reception such material are as simple and easy
the procedure to obtain the
consent to receive the material
2- When sending direct marketing material to a Data Subject, the identity of the sender
shall be clearly disclosed.
3- When the Data Subject withdraws their consent for Direct Marketing purpose, the
Controller shall halt without undue delay sending marketing material.
Public
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded