Overview
Rules for Appointing Personal Data Protection Officer (DPO) – Introduction defines the legal basis and authority for issuing the Rules governing the appointment of a Personal Data Protection Officer (DPO) under the Saudi Personal Data Protection Law (PDPL).
Issued by the Saudi Data and AI Authority (SDAIA), these Rules are based on Article 30 of the Personal Data Protection Law (PDPL) and Article 32 of its Implementing Regulations, establishing the statutory foundation for regulating the appointment of a Personal Data Protection Officer (DPO) by Controllers within the Kingdom.
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
Introduction
Saudi Data & AI Authority “SDAIA” issued these Rules based on Paragraph (2) of Article (30) of Personal Data Protection Law issued pursuant to Royal Decree No. (M/19) dated 09/02/1443 AH and amended pursuant to Royal Decree No. (M/148) dated 05/09/1444 AH, and Paragraph (4) of Article (32) of the Implementing Regulations of the Law.
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.
Legal Issuing Authority
This Introduction confirms that the Saudi Data and AI Authority (SDAIA) is the competent authority responsible for issuing the Rules governing the appointment of a Personal Data Protection Officer (DPO). The authority to issue these Rules is derived directly from the Personal Data Protection Law (PDPL) and its Implementing Regulations.
Statutory Basis Under PDPL
The Rules are issued based on Article 30 of the Personal Data Protection Law (PDPL), which empowers the Competent Authority to regulate supervisory and compliance mechanisms, and Article 32 of the Implementing Regulations, which sets out the obligation to appoint a Personal Data Protection Officer (DPO) in specific circumstances.
