PDPL
Saudi Arabia Personal Data Protection Law.
A guide to the NCA e-commerce cybersecurity guidelines — the seven CGESP categories for SME and SoHo sellers, and the consumer-facing CGEC companion document.
A free NCA DCC-1:2022 compliance checklist — the four classification levels, every control by data lifecycle stage, and the third-party sharing rules.
A guide to NCA Data Cybersecurity Controls (DCC-1:2022) — four classification levels, 19 controls across the data lifecycle, and third-party sharing rules.
A guide to the NCA Saudi Cybersecurity Workforce Framework (SCyWF v1.5) — five categories, twelve specialty areas, forty job roles and the new competency areas.
How Saudi organisations run third-party and vendor risk assessment in 2026 — tiering, due diligence, right-to-audit clauses and monitoring under SAMA, NCA ECC and PDPL.
Cyber incident classification, escalation and regulatory notification for Saudi Arabia — SAMA CSF, NCA ECC and PDPL/SDAIA obligations unified in one runbook.
SDAIA is enforcing PDPL with SAR 5M fines. Saudi banks, government entities and enterprises in Riyadh and Dammam — here is why you should act now.
How to handle PDPL cross-border data transfers from Saudi Arabia — adequacy, safeguards, SaaS vendor flows, and data residency strategies explained.
A practitioner guide to PDPL data subject rights in Saudi Arabia — access, correction, destruction, objection and the 30-day response clock explained.
A practical playbook for compliance audit in Saudi Arabia — scoping, evidence, fieldwork and reporting against SAMA CSF, NCA ECC, PDPL and ISO 27001 in 2026.
A 2026 buyer's guide to GRC software for Saudi Arabia — what to look for in SAMA, NCA, PDPL and ISO 27001 coverage, data residency and bilingual support.
An introduction to GRC Vantage Insights — practical guides on SAMA frameworks, NCA frameworks, PDPL, ISO 27001 and ISO 22301 for Saudi organisations today.
A step-by-step ISO 27001:2022 certification roadmap for Saudi organisations — scope, Annex A controls, Stage 1 and Stage 2 audits, and SAMA CSF alignment.
On-premise GRC software for Saudi Arabia — when sovereignty matters, deployment options, PDPL data residency, NCA CCC and SAMA outsourcing implications.
A step-by-step PDPL Saudi Arabia implementation checklist — lawful basis, DPO, records of processing, data subject rights, breach notification and transfers.