Highlights Of The Personal Data Protection Law

The Kingdom of Saudi Arabia (the "Kingdom") has issued its first data protection law: the Personal Data Protection Law (the "PDPL"), to regulate the collection and processing of personal data.

What is the purpose of the PDPL and what is the scoop of its application?

The PDPL comes in line with the technological development in the Kingdom and it emphasizes the importance of protecting the personal data of individuals. The PDPL applies to any personal data processing carried out by a controller, which is any entity that determines the purpose of processing personal data and how it is processed (the "Controller"), whether the data processing is initiated by it or through any entity that processes data on its behalf (the "Processer").