PDPL IR

Implementing Regulation of the PDPL

Controllers and processors subject to PDPL.

  • Regulation
  • Saudi Data and AI Authority
  • 2023

At a glance

  • 33 assessable requirements
  • 38 Articles

Structure

Assessable requirements in each main part.

  1. Art. 1Definitions 0
  2. Art. 2Personal or family use 0
  3. Art. 3General provisions for Data Subject Rights 1
  4. Art. 4Right to be informed 1
  5. Art. 5Right of access to Personal Data 1
  6. Art. 6Right to Request Access to Personal Data 1
  7. Art. 7Right to Request Correction of Personal Data 1
  8. Art. 8Right to Request Destruction of Personal Data 1
  9. Art. 9Anonymisation 1
  10. Art. 10Means of Communication 1
  11. Art. 11Consent 1
  12. Art. 12Consent withdrawal 1
  13. Art. 13Legal Guardian 1
  14. Art. 14Processing to serve Actual Interest of Data Subject 1
  15. Art. 15Collecting Data from Third Parties 1
  16. Art. 16Processing for Legitimate Interest 1
  17. Art. 17Processor selection 1
  18. Art. 18Processing data for a purpose other than the one for which it was collected 1
  19. Art. 19Data Minimisation 1
  20. Art. 20Disclosure of Personal Data 1
  21. Art. 21Controls for Processing Personal Data for Public Interest Purposes 1
  22. Art. 22Correction of Personal Data 1
  23. Art. 23Information Security 1
  24. Art. 24Notification of Personal Data Breach 1
  25. Art. 25Impact Assessment 1
  26. Art. 26Processing Health Data 1
  27. Art. 27Processing Credit Data 1
  28. Art. 28Processing Data for Advertising or Awareness Purposes 1
  29. Art. 29Direct Marketing 1
  30. Art. 30Collection and Processing of Data for Scientific, Research, or Statistical Purposes 1
  31. Art. 31Photographing or Copying Official Documents that Reveal the Identity of Data Subjects 1
  32. Art. 32Data Protection Officer 1
  33. Art. 33Records of Personal Data Processing Activities 1
  34. Art. 34National Register of Controllers 1
  35. Art. 35Accreditation bodies 0
  36. Art. 36Auditing and Controlling 1
  37. Art. 37Submitting and processing complaints 0
  38. Art. 38Publication and Enforcement 0

Linked frameworks

Requirements linked to this framework's requirements in the CIYAJ library, stated in the texts or suggested by CIYAJ.

An independent summary prepared by CIYAJ from the published text. Always rely on the official text. CIYAJ is not affiliated with, approved or endorsed by the issuer.

See CIYAJ against your own frameworks.

Tell us which frameworks are in scope and we will arrange a walkthrough with your team.

Request a briefing