The Saudi Data and Artificial Intelligence Authority (SDAIA) has launched a public consultation on draft guidelines for licensing personal data protection activities.
This initiative utilizes the unified electronic platform for public and government consultations, known as Istitlaa. Consequently, the authority invites the public, specialists, and relevant entities to submit their feedback.
Draft Guidelines for Personal Data Protection
The draft guidelines include three distinct documents designed to regulate data processing. Specifically, these documents establish the regulatory framework for personal data protection across various sectors.
They are based on the regulations issued by the competent authority governing these activities. The first document is the Accreditation Certificate Standards Guide for Data Controllers and Processors.
This guide outlines the criteria for assessing compliance with the Personal Data Protection Law. Meanwhile, it aims to improve compliance levels and strengthen data handling practices.
Standards for Data Controllers and Processors
The second document is the Standards Guide for Licensing Personal Data Processing Audit and Inspection Activities. This guide defines the standards and requirements that entities must meet to obtain licenses.
Furthermore, the objective is to ensure the competence of licensed entities and the quality of their services. The third document is the Standards Guide for Licensing Accreditation Certificate Activities for Data Controllers and Processors.
This guide establishes the rules for issuing accreditation certificates. As a result, it helps verify that data processing entities adhere to national standards.
Licensing Requirements for Auditing and Inspection
The guides for licensing audit, inspection, and accreditation certification activities define the standards that entities must meet. These requirements ensure that licensed entities maintain high quality in their services.
Consequently, this strengthens public trust in services that rely on personal data. The initiative aims to support decision-making related to auditing, inspection, and accreditation for personal data protection.
Public Consultation and Feedback Process
In addition, the guidelines encourage entities to adopt practices that comply with the law. This includes appropriate safeguards for the transfer or disclosure of personal data outside the Kingdom.
These measures are intended to improve compliance among data controllers and processors. Moreover, they reinforce public trust in services and products that rely on personal data.
Interested parties can participate in the public consultation through the official Istitlaa platform. The platform provides direct links to the three guides for public review.
These links include the Accreditation Certificate Standards Guide, the Accreditation Certification Activities Licensing Standards Guide, and the Audit and Inspection Activities Licensing Standards Guide.
Source: Saudi Press Agency
