PDPL Article 21, says that controllers to respond to any requests from data subjects who are exercising their rights under the PDPL (such as access, correction, or deletion).
The response must be provided within the time period and in the manner defined by the Regulations. This ensures accountability and timely communication.
Saudi PDPL Article 21
Respond to Requests
The Controller shall respond to the requests of the Data Subject pertaining to their rights under this Law within such period and in such method as set out in the Regulations.
Explanation of Saudi PDPL Article 21
Controllers must reply to data subject rights requests within regulatory timelines
Saudi PDPL Article 21 says, that if a data subject asks to exercise their rights under the PDPL, the controller must respond within the time and format required by the Regulations.
