PersonalDataProtectionLaw
Art. 18Status unknownSaudi ArabiaRegulation
Issued by Ministry of Investment (misa.gov.sa)
1-! The Controller shall, without undue delay, Destroy the Personal Data when no longer
necessary for the purpose for which they were collected. However, the Controller
may retain data after the purpose of the Collection ceases to exist; provided that it
does not contain anything that may lead to specifically identifying Data Subject
pursuant to the controls stipulated in the Regulations.
2- In the following cases, the Controller shall retain the Personal Data after the purpose
of the Collection ceases to exist:
a)! If there is a legal basis for retaining the Personal Data for a specific period, in which
case the Personal Data shall be destroyed upon the lapse of that period or when the
purpose of the Collection is satisfied, whichever longer.
Public
"#! If the Personal Data is closely related to a case under consideration before a judicial
authority and the retention of the Personal Data is required for that purpose, in
which case the Personal Data shall be destroyed once the judicial procedures are
concluded.!
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded