RulesGoverningIssuanceAccreditationCertificatesControllersProcessers

1. The entity that received the accreditation certificate shall continue complying with the requirements set forth in Article (4) of these Rules throughout the validity period of the certificate specified in Article (9). The entity shall notify both the Licensee and the Competent Authority if it is unable to maintain such compliance. 2. An entity located outside the Kingdom shall notify the Licensee of any changes in regulatory requirements or practices in its country of operation that conflict with any of the conditions or requirements for obtaining an accreditation certificate stipulated in Articles (3) and (4) of these Rules. The Licensee shall, in turn, notify the Competent Authority accordingly. 3. An entity located outside the Kingdom that has been issued an accreditation certificate under these Rules shall cooperate with the Competent Authority and the Licensee in relation to any requests related to the Law, the Regulations, and these Rules. 4. The Licensee shall, upon the request of the Competent Authority, conduct an evaluation of the practices and procedures followed. The Licensee shall also ensure the continued compliance of the accredited entity with the provisions of the Law, the Regulations, and the conditions and requirements stipulated in Articles (3) and (4) of these Rules, including in cases of complaints or the detection of violations arising from the application of the Law and the Regulations. Chapter Four: Duration, Renewal, or Revocation of Accreditation Certificates