Rules for Appointing Personal Data Protection Officer Article 10 grants the Competent Authority (SDAIA) the power to review and amend the rules for appointing a Data Protection Officer (DPO). There is no set review timeline—it is left to the Authority’s discretion based on evolving needs.
SDAIA can amend the DPO rules whenever necessary.
Rules for Appointing Personal Data Protection Officer Article 10
Authority to Amend
The Competent Authority shall review these Rules when required, and may introduce any amendment or update thereto.