The Personal Data Protection Law applies to every organization processing personal data in the Kingdom. We start with where personal data actually lives and flows, then build the processes that let you answer requests, report breaches and transfer data lawfully.
Templates, workflows and training are delivered in Arabic and English, ready for your teams and your data protection officer.
Why it matters
Data inventory and records of processing
Privacy notices and consent
Data-subject rights process
Breach notification procedure
Cross-border transfer assessment
How the engagement runs
- 1DiscoverInterviews and data mapping across departments and systems
- 2AssessGaps against PDPL and its implementing regulations
- 3BuildNotices, processes, templates and controls
- 4OperateTraining, DPO support and first compliance review
What you receive
- Records of processing activities
- Privacy policy and notices
- Data-subject request workflow
- Breach response and notification plan
- Privacy impact assessment template
Questions
Do we need a data protection officer?
It depends on the nature and scale of your processing under the implementing regulations. We assess this with you and can support the role on an interim basis.