RulesGoverningIssuanceAccreditationCertificatesControllersProcessers

The Terms and Phrases set forth in these Rules shall bear the meanings assigned to them in Article (1) of the Personal Data Protection Law (The Law) issued by Royal Decree No. (M/19), dated 9/2/1443 AH, and its amendments, as well as Article (1) of the Implementing Regulation of the Personal Data Protection Law and Article (1) of the Regulation on Personal Data Transfer Outside the Kingdom (The Regulations). Unless the context requires otherwise, the following terms and expressions, wherever mentioned in these Rules, shall have the meanings expressed herein. 1. Rules: Rules governing the issuance of accreditation certificates for Controllers and Processers. 2. Licensee: The entity authorized by the Competent Authority to engage in the activity of issuing accreditation certificates. 3. Applicant: A Controller or Processor —operating either within or outside the Kingdom— that submits an application for an accreditation certificate to a licensee. 4. Accreditation Certificate: A certificate issued by the Licensee to Controllers and Processors, confirming that the practices and procedures followed by the Controllers and Processors in processing personal data comply with the provisions of the Law, the Regulations, and the requirements provided for in these Rules. 5. Certification Issuance Assessment Report: A report prepared by the Licensee that includes the results of the evaluation of the practices and procedures in processing personal data pursuant to the provisions of the Law and the Regulations, in accordance with the mechanism and standards set by the Competent Authority. 6. Competent Authority Platform: An online platform operated by the Competent Authority to support the implementation and enforcement of the provisions of the Law and the Regulations.