Per Saudi Arabia PDPL (Royal Decree M/19 of 2021 + Amendment 2023 + Implementing Regulations 2023): scope. Requirements include (a) determine applicability + (b) Lawful Basis for Processing per the Law + (c) align with SDAIA (Saudi Data and AI Authority) guidance + (d) document applicability.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.