Saudi Arabia: Adopted Data Management and Personal Data Protection Standards

In January 2021, the National Data Management Office (NDMO) issued the "Data Management and Personal Data Protection Standards" under the Personal Data Protection Law. Initially, the NDMO outlined its guiding data principles such as ethical use of data, ensuring public data is open by default, and proactive protection of data. The regulations explain the general protection framework and its control structure. The NDMO outlines its management standards on the domains data quality, data operations, data classification, and data operations. Additionally, the NDMO specifies the general organisation of a data management entity, the required compliance framework, the evaluation structure, and training and awareness.