Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights says that controllers must inform individuals whether their personal data will be shared with third parties inside or outside the Kingdom, clearly identify those parties, describe the nature of those entities, and explain the reason and frequency of data disclosure.
Eighth: Personal Data Subjects Rights
The Controller shall clarify the rights of Data Subjects regarding the collection and processing of their data as specified in Law, along with the method of exercising these rights. The Controller shall also provide appropriate communication channels to respond to Data Subjects’ requests related to their rights according to their choice and availability. These channels may include: (emails, text messages, communication via electronic applications). The Controller shall also specify the time taken for response.
Right to Be Informed
1. The Right to be informed, which includes informing Data Subjects of the legal basis and purpose of collecting data while ensuring that Data Subjects’ data will not be subsequently processed in any way inconsistent with the purpose of collecting such data, for which Data Subjects provided their explicit or implicit consent.
Right to Be Informed
2. The Right to access their Personal Data held by the Controller, which includes Data Subjects’ access to their Personal Data upon request or through means provided by the Controller that enables Data Subjects to have access to their Personal Data Automatically without the need to submit a request.
Right to Readable Copy
3. The Right to request access to Personal Data held by the Controller in a readable and clear format consistent with the content of records, whether such Personal Data is in a commonly used format if feasible, or providing a printed hard copy of such data.
Right to Correction
4. The Right to request correction, completeness, and update of Personal Data held by the Controller.
Right to Erasure
5. The Right to request the destruction of Personal Data held by the Controller if Personal Data is no longer necessary to achieve the purpose for which it was collected.
Right to Withdraw Consent
6. The Right to withdraw consent for Personal Data Processing at any time, unless there is a legal basis that requires otherwise, in addition to elaborating how to withdraw such consent by providing means and methods to ensure a prompt response to requests related to exercising rights according to measures stated in Article (12) of the Implementing Regulation of the Law.
Right to Complain
7. The Right to submit any complaint related to applying the provisions of the Law to the Competent Authority.
Right to Complain
8. The Right to claim compensation for material or moral damage if the Data Subject is harmed as a result of any violation stipulated in the Law and its Implementing Regulations.
Explanation of Eighth: Personal Data Subjects Rights
Know what and why:
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights states that Data Subjects must be told about the purpose and legal basis of processing at the time of collection, and that the data will not be used in a way inconsistent with their original consent.
View your data:
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights gives individuals the right to view their personal data either upon request or through automated access tools made available by the Controller.
Get a usable copy:
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights allows individuals to request a clear and readable copy of their data, preferably in a commonly used format or hard copy.
Fix wrong data
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights gives individuals the right to correct, complete, or update their personal data held by the Controller.
Request deletion
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights allows individuals to request deletion of personal data that is no longer needed for its original purpose.
Change your mind
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights allows withdrawal of consent for data processing at any time, unless a legal reason prevents it. Controllers must provide a simple method to do so and respond promptly.
Report violations
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights allows individuals to lodge complaints about misuse or violations of the Law with the Competent Authority.
Claim damages
Elaboration and Developing Privacy Policy Guideline — Eighth: Personal Data Subjects Rights provides that individuals can seek compensation if they suffer harm due to violations of the Law or its Implementing Regulations.
