Pursuant to Decision of the Council of Ministers No. 98 dated 1443/2/7 SDAIA shall be the Competent Authority, for a period of two years, during which consideration shall be given – in light of the results of the application of the provisions of the PDPL and its Implementing Regulations and in light of the level of maturity in the data sector – to transferring the responsibility to supervise the application of the provisions of the Law and its Implementing Regulations to the National Data Management Office.
The key functions of the Competent Authority include, but are not limited to:
1. monitoring, investigating and enforcing compliance with the PDPL;
2. providing consultations on PDPL and other data protection legal instruments (for example, Implementing Regulations to the PDPL); and
3. management and investigation of complaints.