Saudi Arabia: Closed consultation on SDAIA Draft Rules Governing the National Register of Controllers Processing Personal Data

On 24 April 2024, the Saudi Data and AI Authority (SDAIA) closed its public consultation on Draft Rules governing the national register of controllers processing personal data. The draft rules aim at creating a unified register for improved compliance and would apply to public entities, entities whose main activities involve the processing and collection of personal data, and entities that process sensitive data with high risk to individual rights and freedoms. The draft rules include a registration procedure, including filling out a registration form, conducting an eligibility verification, and the issuance of a registration certificate. Furthermore, the applying entities would be required to appoint a delegate who acts on behalf of the entity during the registration process.