TheRulesGoverningTheNationalRegisterOfControllersWithinTheKingdomPublicEN
Art. 12Status unknownSaudi ArabiaRegulation
Issued by Saudi Data & AI Authority / NDMO
The Platform offers a range of e-services aimed at protecting data as national assets and
safeguarding the rights of individuals from illegal violations. These services include:
1. Personal Data Breach Notification Service: This service enables Controllers to notify a personal
data breach incident to the Competent Authority immediately after its occurrence, within a
period not exceeding (72) hours of becoming aware of the incident, this reporting is necessary
if the incident would harm the personal data or the data subject or if it conflicts with their
rights or interests, as outlined in Article (24) of the Executive Regulations of the Personal Data
Protection Law.
2. Privacy Impact Assessment Service: This tool analyzes the impact of processing personal
data on the products and services provided. It helps determine the scope and objectives of
the processing, identify regulatory justifications, and assess the risks associated with
processing personal data.
3. Legal Support Service: This service provides support and guidance to assist public entities in
understanding the Personal Data Protection Law and its regulations. This includes
interpreting stipulated provisions and requirements as well as offering guidance on relevant
manuals and regulations, thereby contributing to ensuring effective application and achieving
desired goals.
4. Compliance Assessment Service: This service involves periodically evaluating compliance with
specific standards and requirements to monitor the level of commitment and ensure the
effectiveness of actions taken to implement laws, regulations, and policies. It also helps
identify incorrect practices to address them and improves business practices and
procedures.
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded