Overview
The Rules Governing the National Register of Controllers Within the Kingdom Article 1 establishes the definitions that apply to the registration framework under the Saudi Personal Data Protection Law (PDPL). It aligns the interpretation of key terms with PDPL Article 1 and Implementing Regulation Article 1, while introducing additional definitions specific to the National Register, the National Data Governance Platform, and registration roles.
These definitions ensure consistent application, regulatory clarity, and uniform understanding of obligations related to controller registration and supervision within the Kingdom.
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
Article 1: Definitions
For the purposes of these Rules, the terms and phrases used herein shall have the meanings ascribed to them in Article (1) of the Personal Data Protection Law Issued by Royal Decree No. (M/19) dated 9/2/1443 AH and its amendments, and Article (1) of the Implementing Regulation of the Law, unless expressly defined within the body of these Rules. The following terms and phrases, wherever mentioned, shall have the meanings assigned thereto, unless the context requires otherwise:
- Rules: The Rules Governing the National Register of Controllers within the Kingdom.
- Competent Authority: Saudi Data & AI Authority (SDAIA).
- The Platform: National Data Governance Platform.
- National Register: A register that includes public, private, and individuals Controllers within the Kingdom who process personal data, with the aim of monitoring and following up on Controllers and assisting them in raising the level of compliance with the provisions of the law and regulations, in addition to provide services related to the protection of personal data.
- Representative: Any natural person designated by the Controller for the purposes of completing the registration procedures on the Platform.
- Individual: Any natural person who processes personal data for purposes exceeding personal or family use.
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.
