المملكة: A digital and transparent platform with the complaint .. Amendments to the personal data protection system
This initiative comes as an extension of the Kingdom’s efforts to protect the rights of individuals and ensure the highest levels of safety in dealing with their data, within a comprehensive vision that puts the promotion of confidence in digital services a national priority.
According to the amendments, the control authority must provide information in a simplified and understandable language, to facilitate the benefit of the owners of the data from their rights stipulated, the most prominent of which is the right to obtain a clear and readable copy of their data, according to the specified controls.
Deficient obligations in the privacy policy
An accurate organization of propaganda and marketing materials
The amendments paid special attention to organizing the transmission of propaganda and marketing materials, as they required obtaining explicit and free approval from the recipient, with the prohibition of using misleading means. The amendments also obligated the bodies sent to enable individuals to allocate their propaganda choices, and document their approval by investigating means in the future.
In the event that the owner of the data decides to retract his approval of treatment for marketing purposes, the control body is required to immediately stop without unjustified delay, which enhances respect for individuals ’desire and their will to control their data.
A vital role for the data protection official
Among the most prominent features of the amendments as well is the obligation to appoint an official to protect personal data within each control, with the need to document its data with the competent authority through the electronic platform. This official takes pivotal roles, including following up the commitment of the system, receiving requests and complaints, supervising the records of processing activities, processing violations, in addition to implementing the effects of the effect of impact and preparing periodic auditing reports.
The amendments imposed the necessity of registration of controlling authorities in the national registry of the control authorities, in specific cases, most notably: if the entity is general, or its main activity is to process personal data, or if the data is transferred outside the Kingdom, or processing sensitive data or minors data.
Each control authority is allocated to a special record within the platform, which includes data for processing activities, and other relevant information and documents. The obligation also included individuals whose processing of data exceeds personal or family use, which enhances the comprehensive briefing of data movement in all sectors.
Mechanism for dealing with complaints: speed and transparency
The amendments did not neglect the strengthening of mechanisms for dealing with complaints, as it stipulated that they received them through specific means, with registration in an official record, examining them accurately, and communicating with the complainants as needed. The complaint is required to include clear data on the violation, the identity of its introduction, and the complainant against it, with supportive documents.
The regulation confirmed that the competent authority is committed to addressing complaints with rapid and effective procedures, with the complainant notice the final results, which enhances the confidence of individuals in the seriousness of responding to violations of their data.
The amendments were imposed on the control authorities to respond to the requests issued by the competent authority within a period not exceeding ten working days, which ensures effective control over the commitment of the authorities to apply the system and the regulations.
- For more: Follow Khaleejion 24 Arabic, Khaleejion 24 English, Khaleejion 24 Live, and for social media follow us on Facebook and Twitter
