Privacy Policy

Your use of the National Data Platform will be treated as your acceptance of this platform’s privacy policy, and the terms and conditions that govern the platform. If you do not agree to this policy, you must not use any services provided by the National Data Platform.

Once you visit the National Data Platform (data.gov.sa), the server of the platform that works automatically records your IP address (your Internet Protocol address is the number of the computer you are using, which allows other devices connected to the Internet to identify the destination of the data issued by it), and collects some information such as the type of browser and search engine, the date and time of the visit, and the URL of any website through which you are referred to the National Data Platform, but without identifying your personal identity.

This privacy policy applies to the National Data Platform (data.gov.sa) only. If you go to another website through (data.gov.sa), you should read the privacy policy of that particular website to determine its information security and adopted privacy practices.

• Cookies
  The website may store cookies on your computer when you visit the Platform. Cookies are a piece of data that uniquely identifies you as a user and can be used to improve your knowledge of the Platform and to better understand the user base of this Platform.
  Most browsers are initially set up to accept cookies, and you can also reset your browser to refuse all cookies or to alert you when cookies are being sent. Please also note that we may/may not associate the information we store in cookies with any personally identifiable information you provide on our Website.
• Personal information
  The personal information we collect includes your name, necessary contact details, and the organization you belong to.
  The National Data Platform (data.gov.sa) complies with and adheres to the main principles and general rules for the protection of personal data law (PDPL), as well as the main principles and general rules for data sharing.

Personal data is stored inside the Kingdom of Saudi Arabia in the premises of the National Information Center, and the infrastructure is protected by state-of-the-art and advanced technologies in accordance with the policies and controls of the National Cybersecurity Authority and international standards. These measures are implemented to protect the sensitive information from unauthorized access and reduce cyber threats and risks. The data will be destroyed within three years from the date of its storage in a secure manner. Once the data is destroyed, it cannot be retrieved again according to the policies of the National Information Center.

The collection and processing of personal data is based on the consent of the personal data subject. The consent to the collection and processing of personal data may be revoked at any time unless there is another legal basis. To do this, you can contact the Data Management Office of the Saudi Data & AI Authority (SDAIA).

E-mail: Dmo@sdaia.gov.sa

We guarantee that this website has adopted and implemented the highest possible security measures to protect the personal data. The website encrypts information considered personal data or data that must be kept confidential in accordance with legal requirements.

SDAIA is committed to doing everything we can to keep your data secure. To prevent unauthorized access or disclosure, we have put in place technical and organizational measures to secure the data we collect about you.

We protect your data using different levels of encryption. We also make sure that any third parties we interact with are obligated to maintain the security of all personal data that they process on our behalf. Also, access to personal data will not be allowed except for authorized persons who provide the services of the National Data Platform (data.gov.sa).

• Right to knowledge: The personal data subject has the right to know the ways we collect their data, the legal basis for collecting and processing it, how it is processed, preserved, destroyed, and with whom it will be shared.
• The right to access personal data: The personal data subject has the right to request a copy of their personal data via the indicated e-mail, and it will be provided to them, free of charge, via e-mail.
• The right to correct personal data: The personal data subject has the right to request the correction of their personal data that they deem inaccurate, incorrect, or incomplete through the indicated e-mail, and it will be reviewed and updated within seven working days. The personal data subject will be notified of this change via e-mail.
• The right to destroy personal data: The personal data subject has the right to request the destruction of their personal data in certain circumstances unless there is a legal text specifying a specific period of retention or contractual requirements.
• The right to withdraw consent to the processing of personal data: The personal data subject can withdraw consent to the processing of their personal data at any time unless there are legitimate purposes that require the opposite.

• The last update on the privacy policy was made on 27/8/1444 AH.
• The Authority's website management reserves the right to add or change any of the provisions of the privacy policy, and the website management will notify the data subject of that. The website management has the right to terminate the data subject’s account if they do not accept any change in the privacy policy.
• The Arabic language is the approved language in the application of the terms and conditions, and in the event of a dispute arising in the interpretation of any text mentioned in any other language, the text written in the Arabic language shall prevail.