Steps

Step One: Attestation of Documents through the Ministry of Foreign Affairs (MOFA):

• Access the MOFA Platform: The authorized representative accesses the official website of the Saudi Ministry of Foreign Affairs and uses the verification service for non-Saudi companies & digital identity issuance for the company’s representative via the Service link.
• Complete the Form and Attach the Required Documents: The representative completes the online service form and attaches all required supporting documents.
• Submit the Application: After checking that the information and attached documents are accurate, the representative submits the application.
• Application Review and Approval: MOFA reviews the application and the attached documents. If the requirements are met, MOFA approves the attestation request.

Step Two: Registration on the National Data Governance Platform
After obtaining MOFA’s approval, the authorized representative completes the entity’s registration on the National Data Governance Platform as follows:

• Select Register Entities Outside the Kingdom: The representative selects the “Entities Outside the Kingdom” option on the Platform.
• Start the Service: The representative clicks “Start Service” to proceed to the registration page.
• Enter Identification Details: The representative enters the request number issued by MOFA and their date of birth to retrieve and verify their details.

• Complete the Representative’s Details: The representative’s details are retrieved, and the representative completes the required fields, such as the email address and mobile number, and creates a password for the account.
• Complete the Entity Registration: The entity’s card appears on the dashboard. The representative selects “Continue as Representative” and then “Complete Registration” to proceed with the remaining steps and obtain the certificate.
• Complete the Profile Information: The representative completes all required information in the profiles for both the entity and the representative.
• Eligibility Assessment for Personal Data Protection Officer (DPO) Appointment: The representative determines whether it is mandatory to appoint a DPO in accordance with the conditions outlined in Article (32) of the PDPL Implementing Regulation.
• Appoint a Personal Data Protection Officer: If the appointment requirements apply, the entity’s representative shall appoint a Personal Data Protection Officer, who may be selected from within or outside the Kingdom.
• Issue the Certificate: Once all steps have been completed, the entity’s registration certificate for the National Register for Personal Data Protection will be issued.