Saudi Arabia

Data Protection Law (PDPL)

Ducara helps you comply with the Saudi Arabian Constitution and the PDPL of 2019 (as amended in 2020), which protect the right to privacy and personal data for individuals. Ducara ensures that your personal data processing is based on one of the legal bases, such as consent, contract, or legitimate interest, and that you respect the data subjects’ rights and choices. Ducara also assists you with the obligations and procedures established by the PDPL, such as registering as a data controller or processor (if applicable), implementing security measures (including pseudonymization or encryption), notifying breaches (if applicable), and cooperating with CDP (the Saudi Arabian supervisory authority).