Riyadh, 22 Muharram 1448 AH, corresponding to July 7, 2026, SPA – The Saudi Data and Artificial Intelligence Authority (SDAIA) called on the public and concerned entities to provide their feedback on the draft standards guides related to licenses for personal data protection activities and issuance of accreditation certificates, through the unified electronic platform for soliciting opinions of the public and government entities 'Istitlaa'; with the aim of involving various parties in developing the regulatory environment for personal data protection in the Kingdom.

This step aims to enhance the participation of companies and specialists in supporting decision-making regarding the regulation of auditing, inspection, and accreditation certification activities for processing personal data; thereby contributing to raising the level of compliance with the provisions of the Personal Data Protection Law and its implementing regulations, and enhancing individuals' trust in the services and products provided by controllers and processors.

The proposed guides include: the Standards Guide for Issuing Accreditation Certificates to Controllers and Processors, the Standards Guide for Licensing Auditing and Inspection Activities for Personal Data Processing, and the Standards Guide for Licensing Accreditation Certification Activities for Controllers and Processors, based on the regulatory rules issued by the competent authority in this regard.

The Standards Guide for Issuing Accreditation Certificates to Controllers and Processors aims to determine the standards and requirements against which the commitment of controllers and processors to the provisions of the law and its implementing regulations is measured, thereby contributing to raising the level of compliance and enhancing personal data protection practices among those entities.

The Standards Guide for Licensing Auditing and Inspection Activities, and the Standards Guide for Licensing Accreditation Certification Activities, aim to clarify the standards and conditions that must be met by entities wishing to obtain licenses to practice these activities; thereby ensuring the efficiency of licensed entities and the quality of their outputs in the fields of auditing, inspection, and accreditation certification.

These guides seek to encourage entities subject to the scope of the Personal Data Protection Law to adopt practices compliant with the provisions of the law, its implementing regulations, and documents issued by the competent authority regarding its implementation, including appropriate safeguards when transferring or disclosing personal data outside the Kingdom; thereby contributing to raising the level of compliance of controllers and processors, and enhancing individuals' trust in services and products based on personal data provided by those entities.

Participation in the survey is possible through the following links: https://istitlaa.ncc.gov.sa/ar/Transportation/NDMO/GuidlineCert/Pages/default.aspx https://istitlaa.ncc.gov.sa/ar/Transportation/NDMO/GuidelinesIssueCA/Pages/default.aspx https://istitlaa.ncc.gov.sa/ar/Transportation/NDMO/GuidelinesAuditInpect/Pages/default.aspx