Assess lawful processing, transparency, data rights, security and international-transfer rules. Cookie processing requires a purpose/basis assessment under PDPL.
Processing in the Kingdom and processing of residents’ personal data from abroad, subject to exceptions.
SDAIA · 2026-10-23公式ソース ↗Apply relevant NCA security controls and retain evidence where in scope. Other businesses are encouraged to use the controls; no universal SME audit mandate is claimed.
Government entities/affiliates and private entities owning, operating or hosting critical national infrastructure; assess current detailed applicability.
National Cybersecurity Authority · 2026-10-23公式ソース ↗Cloud controls extend ECC; assess provider/tenant responsibilities and current localization provisions.
Cloud service providers and cloud service tenants covered by NCA scope and applicable services.
National Cybersecurity Authority · 2026-10-23公式ソース ↗規制範囲は組織の活動に応じて評価されます。 このリストは法的助言や公的監査権限の宣言ではありません。