Overview
PDPL Implementing Regulation Article 34 establishes the mandate for the Competent Authority (SDAIA) to issue the formal rules governing registration in the National Register of Controllers under the Saudi PDPL. This Article clarifies that the Authority has full responsibility for defining the registration framework and that the rules must cover all Controllers who are required to register.
The Article forms the regulatory basis for how entities are onboarded into the national oversight system maintained by the Authority, ensuring accountability and visibility over Controllers operating in the Kingdom.
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
Article 34: National Register of Controllers
The Competent Authority shall issue the rules for registration in the National Register of Controllers, provided that the rules include Controllers that are required to register.
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.
Competent Authority Registration Rules
This provision requires the Competent Authority to issue the rules that govern how Controllers must register in the National Register of Controllers. It also requires that those rules identify the Controllers that are obligated to register.
