Web Content Viewer

Government Entities Registration

Start Service
Description Requirements Steps

The Saudi Data & AI Authority (SDAIA) is responsible for overseeing the implementation of the Personal Data Protection Law (PDPL), issued by Royal Decree No. (M/19) dated 09/02/1443 AH, and its amendments. SDAIA also ensures controllers' compliance by building a unified national register for controllers who process personal data within the Kingdom of Saudi Arabia.

For Frequently Asked Questions Click Here

Requirements

Government entities are mandated to send an official letter to the Saudi Data & AI Authority (SDAIA) requesting registration and furnishing all requisite information pertaining to their designated representative.
Upon receipt, SDAIA shall proceed with the immediate establishment of a dedicated account for the respective entity. Concurrently, a notification will be transmitted to the authorized representative, granting access to the platform to complete the registration procedures.
In instances where the entity's account has not been successfully provisioned, direct communication may be initiated via email at cs@ndmo.gov.sa.
For any inquiries or technical issues encountered during the registration process on the platform, please submit a request via the "Contact Us" option.

Steps

First: Registration Requirements:
• Official Letter: An official letter shall be addressed to the Saudi Data & AI Authority (SDAIA), requesting registration and including the details of the entity’s representative.
• Entity Account Creation: An account for the entity shall be created by SDAIA, and a notification shall be sent to the entity’s representative to complete the entity’s registration procedures on the National Data Governance Platform.

Second: Registration on the National Data Governance Platform:
• Select Government Entity Registration: The representative shall select the “Government Entities” option available on the platform.
• Start Service: The representative shall click the “Start Service” button to proceed to the registration page.
• Sign In: The representative shall sign in through the National Single Sign-On (Nafath).
• Complete Profile Information: The representative shall complete all required information in the profile of the entity and its representative.
• Assess the Requirement to Appoint a Personal Data Protection Officer: The representative shall assess whether appointing a Personal Data Protection Officer is mandatory, in accordance with the cases stipulated in Article (32) of the Implementing Regulation of the Personal Data Protection Law.
• Appoint a Personal Data Protection Officer: If the appointment requirements apply, the entity’s representative shall appoint a Personal Data Protection Officer.
• Issue the Certificate: Upon completion of all steps, the registration certificate in the National Register for Personal Data Protection shall be issued.