Data Management & Governance
Personal Data Protection Law (PDPL)
Compliance & Privacy
Personal Data Protection Policy
Princess Nourah bint Abdulrahman University is dedicated to ensuring rigorous compliance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its Executive Regulations, safeguarding the confidentiality, integrity, and privacy rights of all personnel, students, and stakeholders as a cornerstone of the University Data Governance Framework.
Core Personal Data Protection Principles
6 Statutory Guiding Pillars
1. Lawfulness, Fairness & Transparency
Personal data is processed lawfully, fairly, and transparently, fostering stakeholder trust and enabling data subjects to clearly comprehend processing purposes and their statutory rights.
2. Data Minimization
Collection is strictly limited to the minimum necessary dataset required to fulfill the specific purposes outlined in the Privacy Notice, curbing risks tied to excessive storage.
3. Data Quality & Accuracy
Personal records are maintained accurately, completely, and timely, ensuring all stored information directly correlates with the predefined authorized purposes.
4. Storage Limitation & Secure Destruction
Processing is restricted to consented purposes, retaining records only as long as necessary, followed by secure destruction to prevent leakage, loss, or unauthorized retrieval.
5. Accountability & Governance
The University implements robust operational measures and maintains verifiable records of processing activities proving demonstrable compliance with PDPL bylaws.
6. Data Security & Confidentiality
Deploying rigorous technical and cybersecurity controls to protect personal data from breaches, tampering, or misuse in accordance with National Cybersecurity Authority (NCA) directives.
Complete Personal Data Protection Policy Document
Access the full official policy handbook and detailed procedural framework endorsed by the University.