Saudi Arabia
Saudi PDPL compliance, made simple
ComplianceDesk gives you 9 pre-built Saudi PDPL controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving Saudi PDPL compliance stops being a spreadsheet exercise.
Every Saudi PDPL control, organised for you
The real control library ComplianceDesk seeds the moment you activate Saudi PDPL — 9 controls across 4 categories.
Consent & Sensitive Data
- SAPDPL-1.1 Consent obtained as the default lawful basis
- SAPDPL-1.2 Sensitive personal data given enhanced protection
Data Subject Rights
- SAPDPL-2.1 Access, correction, deletion and portability rights supported
- SAPDPL-2.2 Consent withdrawal and objection to automated decision-making supported
Cross-Border Transfer, Registration & DPO
- SAPDPL-3.1 Cross-border transfers rely on SDAIA-approved SCCs or BCRs
- SAPDPL-3.2 Controller registered on SDAIA's National Data Governance Platform where required
- SAPDPL-3.3 Data Protection Officer appointed where required
Breach Notification & Penalties
- SAPDPL-4.1 Breaches notified to SDAIA within 72 hours where risk to data subjects exists
- SAPDPL-4.2 Administrative and criminal penalty exposure understood
Frequently asked questions
How many controls does ComplianceDesk track for Saudi PDPL?
9, organised into 4 categories, ready to assign to an owner as soon as you activate the framework.
Can I track Saudi PDPL alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up Saudi PDPL in ComplianceDesk?
Activating Saudi PDPL instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
See your full compliance picture
131 frameworks, one system of record.