Author

Zahi Y. Younes

Browsing

In brief The Saudi Data and AI Authority (SDAIA) has published a procedural guide to data breach incidents, notification and response (“Guide”). The Guide supplements the existing notification obligations under the Saudi Personal Data Protection Law (PDPL) and provides organizations with guidance on the various stages of responding to a personal data breach incident. The Guide can be found here. In this article, we have summarized the key takeaways for organizations to consider when implementing response…

On 10 March 2022, the National Data Management Office (NDMO) published for consultation a draft of the executive regulations (“Regulations”) to the Personal Data Protection Law, promulgated by Royal Decree No. M/19, dated 09/02/1443H (PDPL). You can access our previous alert on the publication of the Law here. You can access the consultation and a full draft of the Regulations here. The consultation invites comments on the Regulations and will close on 25 March 2022. The timing…