TheRulesGoverningTheNationalRegisterOfControllersWithinTheKingdomPublicEN
Art. 2Status unknownSaudi ArabiaRegulation
Issued by Saudi Data & AI Authority / NDMO
subject to the application scope of the Personal
These Rules shall be applicable to Controllers
Data Protection Law and are mandated to register on the Platform in any of the following
instances:
1. If the Controller is a public entity.
2. If the Controller’s main activity is based on personal data processing.
3. If the controller processes sensitive data.
4. If the individual processes personal data for purposes exceeding personal or family use.
1 Any public entity, natural person or private legal person that specifies the purposes and manner of processing
personal data, whether the data is processed by that controller or by the Processor.
Public
This aims to build a national register for public and private Controllers and individuals who
process personal data within the Kingdom, in addition to monitoring and following up on
Controllers, assisting them in raising their level of commitment to implementing the provisions of
the law and regulations and providing services related to personal data protection by registering
on the Platform.
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded