SDAIA Invites Public Feedback on Draft Guidelines for Licensing Personal Data Processing Audit Activities

 The Saudi Data and AI Authority (SDAIA) has invited the public to submit feedback on the draft Guidelines for Licensing Standards of Auditing and Inspection Activities in Personal Data Processing through the unified public consultation platform, Istitlaa.
 The initiative aims to encourage public participation in supporting decision-making on the regulation of personal data processing audit and inspection activities. It also seeks to strengthen compliance with the Personal Data Protection Law and its implementing regulations while enhancing public trust in personal data-driven services and products.
 The draft guidelines seek to establish a clear, consistent, and reliable regulatory framework governing the licensing of entities authorized by the competent authority to conduct audit and inspection activities and issue inspection reports in accordance with the requirements of the Personal Data Protection Law.
 Through the public consultation, SDAIA aims to encourage entities subject to the Personal Data Protection Law to adopt practices aligned with the law, its implementing regulations, and guidance issued by the competent authority. The guidelines also cover appropriate safeguards for transferring or disclosing personal data outside the Kingdom, contributing to higher compliance standards and greater confidence in the personal data protection framework.
 The draft guidelines are available for public consultation through the Istitlaa platform on https://istitlaa.ncc.gov.sa/en/Transportation/NDMO/GuidelinesAuditInpect/Pages/default.aspx.