PDPL
Readiness for the Personal Data Protection Law: data governance, records of processing, and data-subject rights handling.
Learn moreTurn privacy into a managed, certifiable system. ISO/IEC 27701 gives you an internationally recognized privacy information management system that works hand in hand with the Personal Data Protection Law.
ISO/IEC 27701 specifies a privacy information management system (PIMS). It sets requirements and guidance for how organizations protect personal data and the rights of the people it describes, for both controllers that decide how data is used and processors that handle it on their behalf.
For organizations in the Kingdom, ISO/IEC 27701 is a practical way to run privacy as a system: roles, records of processing, data subject requests, privacy by design, and supplier controls, all measured and improved. It maps well to the obligations of the Personal Data Protection Law and to ISO/IEC 27001.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
Not on its own, but it gives you the system to manage privacy. We map it to PDPL obligations so one programme covers both.
Many organizations implement both together. We confirm the best route for your situation during scoping.
No. Certificates are issued by accredited certification bodies. We prepare you so that the certification audit goes smoothly, and we can help you choose a certification body.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Readiness for the Personal Data Protection Law: data governance, records of processing, and data-subject rights handling.
Learn moreImplementation and certification readiness for an Information Security Management System recognised by partners and clients worldwide.
Learn moreData Cybersecurity Controls: protecting data by its classification, across its whole lifecycle.
Learn moreThe PDPL is now enforced. Five actions to take this quarter, in the right order.
Read the articleTell us about the personal data you handle and we will return a written proposal within five business days. NDA first, always.