Saudi Arabia PDPL

Saudi Arabia

v2023

8 domains

8 controls

Saudi Arabia Personal Data Protection Law

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

Breach

1 controls

Controls in the Breach domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-8	Breach Notification, Sanctions, Enforcement	Per Saudi PDPL: breach notification to SDAIA + affected subjects + enforcement awareness including penalties.

Consent

1 controls

Controls in the Consent domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-2	Consent, Notice, Sensitive Data	Per Saudi PDPL: consent + notice + sensitive data. Requirements include (a) Consent requirements + (b) Privacy notices +...

Cross-Border

1 controls

Controls in the Cross-Border domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-6	Cross-Border Transfer	Per Saudi PDPL: cross-border transfer restrictions with adequacy + safeguards + consent + national security exceptions.

Governance

1 controls

Controls in the Governance domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-7	DPO, Registration, Governance	Per Saudi PDPL + IR: DPO designation + Registration with SDAIA where required + governance.

High-Risk

1 controls

Controls in the High-Risk domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-4	Sensitive Data, Children, DPIA	Per Saudi PDPL: heightened safeguards including children + DPIA + privacy by design.

Rights

1 controls

Controls in the Rights domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-3	Data Subject Rights	Per Saudi PDPL: data subject rights including access + rectification + erasure + portability + restriction.

Scope

1 controls

Controls in the Scope domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-1	Scope, Lawful Basis, Definitions	Per Saudi Arabia PDPL (Royal Decree M/19 of 2021 + Amendment 2023 + Implementing Regulations 2023): scope. Requirements...

Security

1 controls

Controls in the Security domain of Saudi Arabia PDPL — 1 controls
Code	Title	Description
SAUDIPDPL-5	Security of Processing	Per Saudi PDPL + NCA: security per Essential Cybersecurity Controls + appropriate to risk.

Frequently Asked Questions

What is Saudi Arabia PDPL?

Saudi Arabia PDPL is a compliance framework from Saudi Arabia with 8 domains and 8 controls. Saudi Arabia Personal Data Protection Law It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does Saudi Arabia PDPL have?

Saudi Arabia PDPL has 8 controls organised across 8 domains. The largest domains are Breach (1 controls), Consent (1 controls), Cross-Border (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does Saudi Arabia PDPL map to?

Saudi Arabia PDPL does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I get started with Saudi Arabia PDPL compliance?

Start your Saudi Arabia PDPL compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Saudi Arabia PDPL requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 723 frameworks.

Get Started Free →

Free forever — no credit card required