You may obtain personal data from various sources including directly from the individual or from other parties, e.g. from public sources (e.g. from publicly open internet databases). The PDPL determines in its Art. 10 specific conditions for obtaining personal data from sources other than from the data subject directly.
to select
to navigate
to close Search by 
- PDPL Guide No. 2 – Data protection in the Kingdom of Saudi Arabia
- PDPL Guide No. 3 – Scope of the PDPL
- PDPL Guide No. 4 – Material scope: What does PDPL regulate?
- PDPL Guide No. 5 – What is personal data?
- PDPL Guide No. 6 – How can individuals be identified?
- PDPL Guide No. 7 – What is sensitive data?
- PDPL Guide No. 8 – What are the specific provisions regarding processing sensitive data?
- PDPL Guide No. 9 – What forms can personal data take?
- PDPL Guide No. 10 – What are the sources of personal data?
- PDPL Guide No. 11 – Are opinions and inferences of individuals considered personal data?
- PDPL Guide No. 12 – Processing data of a deceased individual
- PDPL Guide No. 13 – Is pseudonymized data considered personal data?
- PDPL Guide No. 14 – Is anonymized data considered personal data?
- PDPL Guide No. 15 – What is meant by processing of personal data?
- PDPL Guide No. 16 – Territorial scope: Where does the PDPL apply?
- PDPL Guide No. 17 – Scenario 1: What is considered as processing in the Kingdom?
- PDPL Guide No. 18 – Scenario 2: Who are considered as individuals residing in the Kingdom?
- PDPL Guide No. 19 – Scenario 3: Who are considered as parties outside the Kingdom?
- PDPL Guide No. 20 – What roles do controllers and processors play under the PDPL?
- PDPL Guide No. 21 – When does the PDPL not apply? What is personal or family use?
- PDPL Guide No. 22 – When will the PDPL come into force? What should you do during the grace period?
- PDPL Guide No. 23 – Who is the Competent Authority?