ImplementingRegulationPersonalDataProtectionLaw
Art. 37Status unknownSaudi ArabiaRegulation
Issued by Saudi Data & AI Authority / NDMO
1- A Data Subject may submit a complaint to the Competent Authority within a period not
exceeding (90) days from the date when the incident occurred or when the Data
Subject became aware of it. The Competent Authority shall decide about the
admissibility of the complaint after aforementioned delay when there are reasonable
Public
causes that may have prevented the Data Subject from submitting the complaint in
time.
2- Competent Authority shall receive the complaints that are submitted to it, through the
mean it adopts and according to procedures that ensure celerity and quality.
3- Competent Authority shall keep a record of the complaints filed in a register
specifically created for this purpose.
4- The complaint shall include the following information:
a) Place and time of the violation.
b) Name, identification, address, and telephone number of the complainant.
c) Information about the complained entity.
d) Clear and specific description of the violation, along with the evidence and the
information provided with the complaint.
e) Any other requirements specified by the Competent Authority.
5- The Competent Authority shall examine and study the complaints, their documents,
and may communicate with the complainant as needed to request the relevant
documents and information.
6- The Competent Authority shall take the necessary measures regarding the complaints
submitted to it and inform the complainant of the outcome.
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded