On December 11, 2024, the Saudi Data & Artificial Intelligence Authority (SDAIA) published two draft rules for public consultation: Rules governing the issuance of accreditation certificates for personal data protection (the draft rules on accreditation certificates) and Rules governing the licensing of audits or checks of personal data processing activities and the issuance of accreditation certificates (the draft rules on licensing audits). What are the provisions for issuing accreditation certificates? The draft rules on accreditation certificates define 'accreditation certificates' as certificates issued by authorized entities to applicant data processors or data controllers, confirming
News
Saudi Arabia: SDAIA opens public consultation on accreditation and licensing audits
December 13, 2024
Summary
The Saudi Data & Artificial Intelligence Authority (SDAIA) has released two draft rules for public consultation: one on accreditation certificates for personal data protection, and another on licensing audits of personal data processing activities. The draft rules on accreditation certificates outline requirements for data processors or controllers to obtain certificates confirming compliance with the Personal Data Protection Law (PDPL) and its Implementing Regulations. The draft rules on licensing audits detail the licensing process for entities to conduct audits or issue accreditation certificates, including the methodology, term, and conditions for license renewal or revocation. Public comments on these drafts are accepted until January 11, 2025, through the National Competitiveness Center Istitlaa Platform.