Overview
PDPL Implementing Regulation Article 14 establishes the requirement for Controllers to retain evidence when processing personal data to achieve the Actual Interest of the Data Subject.
It requires proof that the actual interest exists and that contacting or communicating with the Data Subject is difficult, ensuring accountability when this basis for processing is used.
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
Article 14: Processing to serve Actual Interest of Data Subject
When Processing data to achieve an Actual Interest of the Data Subject, the Controller shall retain evidence that such interest exists and that it is difficult to contact or communicate with the Data Subject.
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.