Personal Data Protection Law

Personal Data Protection Law

This is our new practice area and we are the market leaders. Our legal consultancy team is headed by Mr. Faisal al Otaibi, who has many years’ worth of experience in reviewing and amending National Water Company’s (NWC) legal contracts. Our law Firm is also in collaboration with international Personal Data Protection legal expert Prof. Dr. Abu Bakar Bin Munir from Malaysia.

He is an internationally renowned expert with 30 years of experience in the area of privacy and data protection who have been involved in developing data protection laws of countries in Asia and Middle East. He has been consulted by companies around the globe in compliance programs.

Saudi Arabia enacted Personal Data Protection Law 2021 (PDPL 2021) by Royal Decree M/19 of 17 September 2021. It was developed by Saudi Data and Artificial Intelligence Authority (SDAIA). The SDAIA is the competent authority responsible for the implementation of the PDPL. This new law will come into force w.e.f. 23rd March 2022.

We provide following services:

  • Consultancy
  • Advisory
  • Training
  • Auditing

This PDPL represents Saudi Arabia’s first comprehensive data protection law. Virtually all aspects of our daily transactions may be impacted upon the promulgation of this law.

It covers key areas:

  • Purpose limitation (Specified & clear purpose)
  • Data minimizations (Limited to what is necessary)
  • Controller registration & obligations (Companies and organization)
  • Data subject rights (Individual and employees)
  • Consent/ non- consent processing
  • Privacy policy & marketing
  • Penalties
In order to safeguard and protect your organization from breaching PDPL, we can assist you in revamping your legal protocols. There will be serious consequences not complying with this new law.