Personal data protectionIn Arabic: حماية البيانات الشخصية

Definition

The body of rules governing the collection, processing and disclosure of data about an identified or identifiable natural person, giving data subjects rights such as rectification and erasure. Each GCC state has its own law or regulation, and the financial free zones have their own rules.

How it varies across the GCC

The person who decides the purpose of processing is not named the same way. Saudi Arabia’s Personal Data Protection Law says جهة التحكم. The UAE’s Federal Decree-Law No. 45 of 2021 says المتحكم. The processor, sensitive personal data and the data protection officer each have their own entry.

The rules that apply to a specific matter depend on the state, any free zone involved and the current text of the law, so check the official source before relying on them.

Sources

Official texts for the points on this page. General information, not legal advice. An article number is cited only where it was verified.

1. Saudi Personal Data Protection Law, art. 1https://laws.boe.gov.sa/BoeLaws/Laws/LawDetails/b7cfae89-828e-4994-b167-adaa00e37188/1
2. UAE Federal Decree-Law No. 45 of 2021, art. 1https://uaelegislation.gov.ae/ar/legislations/1972