PDPL Data Privacy Compliance Checklist
Covers personal data collection, consent, privacy notices, data sharing, retention, customer rights, breach handling, and controller obligations. SDAIA states that PDPL protects individuals' personal data and defines obligations for controllers.
Sample Audit Programs
For the complete checklist, and scoring criteria download the file
1. Is personal data collected from customers only for specified, explicit, and legitimate purposes as required under Saudi PDPL (issued by Royal Decree M/19)?;
2. Is customer consent obtained before collecting personal data used for non-essential purposes (e.g., marketing communications, data sharing with third parties)?;
3. Is the basis for processing each category of personal data documented (consent, contract performance, legal obligation, legitimate interest), consistent with PDPL requirements?;
4. Is sensitive personal data (as defined by PDPL) identified and subject to heightened protection measures, collected only with explicit consent or specific legal basis?;
5. Is a privacy notice provided to customers at or before the point of data collection, covering the purposes of processing, data categories collected, and individual rights?;
6. Is the privacy notice written in plain Arabic (or dual Arabic/English), accessible to the customer, and current?;
7. Where personal data is shared with third parties (finance partners, insurers, OEM/distributor, marketing agencies), is the basis for sharing documented and compliant with PDPL?;
8. Are data processing agreements in place with third-party processors who handle personal data on behalf of the dealership?;
9. Is a data retention policy in place, defining how long different categories of personal data are kept and the basis for that retention period?;
10. Are personal data deleted or anonymised when the retention period expires, rather than retained indefinitely?;
Customizable Audit Programs to Suit Your Business Needs
يتيح لك نظامنا المرن إنشاء قوائم أسئلة مخصصة، وتجميعها في برامج مفيدة، وضمان الامتثال عبر مختلف الأقسام. قم بمعاينة نماذج البرامج وقوائم الأسئلة لفهم كيف يمكنك تحسين عملية التدقيق بسهولة.