NDMO
National Data Management Office
The Saudi Authority for Data and Artificial Intelligence issued Cabinet Resolution number (292) dated 27/04/1441H, which directs the National Data Management Office to develop and implement policies, governance mechanisms, standards, and controls for data and artificial intelligence and monitor compliance after publication. This led to the development of the National Data Management and Personal Data Protection Standards. According to the Data Management and Personal Data Protection Framework, the 7 standards are specified for 15 domains and are intended to be adopted by all public entities in the kingdom.
The covered domains for Data Management and Personal Data Protection are 15 elements covered in the National Data Management and Personal Data Protection Standards document. An assortment of internal pertinent policies and regulations, international references, and guiding principles were defined to support the development of Data Management and Personal Data Protection standards. The standards must be put into practice by government entities, and annual assessments of compliance will be used to track development and direct efforts toward a successful implementation.
The National Data Management and Personal Data Protection Standards apply to business partners who handle government data in addition to Public Entities. The Data Management and Personal Data Protection standards must be understood and applied by these business partners to all government data assets in their care. Whatever the format or nature of the data, including paper records, emails, data stored electronically, voice recordings, videos, maps, photos, scripts, handwritten documents, or any other recorded data, the Standards apply to all government data.