Saudi Arabia: Opened consultation on SDAIA Draft Rules Governing the National Register of Controllers Processing Personal Data

On 1 April 2024, the Saudi Data and AI Authority (SDAIA) opened a public consultation on Draft Rules governing the national register of controllers processing personal data until 24 April 2024. The draft rules aim at creating a unified register for improved compliance and would apply to public entities, entities whose main activities involve the processing and collection of personal data, and entities that process sensitive data with high risk to individual rights and freedoms. The draft rules include a registration procedure, including filling out a registration form, conducting an eligibility verification, and the issuance of a registration certificate. Furthermore, the applying entities would be required to appoint a delegate who acts on behalf of the entity during the registration process.