For Controllers and Processors
Version 1.0 December 2023
to select
to navigate
to close Search by 
- PDPL Guide No. 2 – Data protection in the Kingdom of Saudi Arabia
- PDPL Guide No. 3 – Scope of the PDPL
- PDPL Guide No. 4 – Material scope: What does PDPL regulate?
- PDPL Guide No. 5 – What is personal data?
- PDPL Guide No. 6 – How can individuals be identified?
- PDPL Guide No. 7 – What is sensitive data?
- PDPL Guide No. 8 – What are the specific provisions regarding processing sensitive data?
- PDPL Guide No. 9 – What forms can personal data take?
- PDPL Guide No. 10 – What are the sources of personal data?
- PDPL Guide No. 11 – Are opinions and inferences of individuals considered personal data?
- PDPL Guide No. 12 – Processing data of a deceased individual
- PDPL Guide No. 13 – Is pseudonymized data considered personal data?
- PDPL Guide No. 14 – Is anonymized data considered personal data?
- PDPL Guide No. 15 – What is meant by processing of personal data?
- PDPL Guide No. 16 – Territorial scope: Where does the PDPL apply?
- PDPL Guide No. 17 – Scenario 1: What is considered as processing in the Kingdom?
- PDPL Guide No. 18 – Scenario 2: Who are considered as individuals residing in the Kingdom?
- PDPL Guide No. 19 – Scenario 3: Who are considered as parties outside the Kingdom?
- PDPL Guide No. 20 – What roles do controllers and processors play under the PDPL?
- PDPL Guide No. 21 – When does the PDPL not apply? What is personal or family use?
- PDPL Guide No. 22 – When will the PDPL come into force? What should you do during the grace period?
- PDPL Guide No. 23 – Who is the Competent Authority?