Overview
The Rules Governing the National Register of Controllers Within the Kingdom Article 8 defines the mandatory obligations of representatives, individuals, and Personal Data Protection Officers (DPOs) when using the National Data Governance Platform.
It clarifies registration duties, data accuracy responsibilities, and ongoing usage obligations to ensure continuous compliance monitoring and effective use of Platform services.
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
Article 8: Obligations
- When using the platform, the representative is committed to all of the following:
Complete the entity’s registration.
- Fill in the data of the Personal Data Protection Officer in accordance with Article (7) of these rules.
- Fill in the information of the entity’s Chief Data (if any).
- View the results of the compliance assessment and the services provided.
- Use the Platform services, if a Personal data protection officer has not been appointed in accordance with Article (6) of these rules.
- Update the controller’s data on regular basis to ensure it is up-to-date.
- When using the platform, individuals are committed to all of the following
- Complete the registration process.
- Use Platform services.
- Update data regularly to ensure it is up-to-date.
- The Personal Data Protection Officer - if appointed - is obligated to use the Platform services stipulated in Article (12) of these Rules.
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.
