RegulationonPersonalDataEN

The terms and phrases used in this Regulation shall have the meanings assigned to them in Article (1) of the Personal Data Protection Law issued pursuant to Royal Decree No. (M/19) dated 9/2/1443 AH and its amendments. The following terms and phrases- wherever used in this Regulation- shall have the meanings assigned to them, unless the context requires otherwise: 1. Regulation: The implementing Regulation for Personal Data Transfer outside the Kingdom. 2. Appropriate Safeguards: The requirements imposed by the competent authority on controllers, which include adherence to the Law and Regulations when transferring or disclosing personal data to entities outside the Kingdom. This applies in cases where exemptions are granted from the conditions for providing an appropriate or minimum level of personal data protection, to ensure appropriate level of protection when transferring personal data outside the Kingdom that meets at least the standards prescribed by the Law and Regulations. 3. Operational Processes: A set of procedures related to the operational processes essential for the controller's activities, including human resources operations, billing, accounting, and other workflow-related procedures. 4. Standard Contractual Clauses: Mandatory provisions governing the transfer of personal data outside the Kingdom that ensure appropriate level of protection for such data not less than the standard prescribed by the Law and Regulations. These provisions are in accordance with a standard form issued by the competent authority. Public Classification Document 5. Binding Common Rules: Rules established by the controller, applicable to each controller and processing party within a group of multinational entities, ensure appropriate protection for personal data transferred outside the Kingdom at a level not less than that prescribed by the Law and Regulations.