تُراجع معالجة المعرفات الشخصية وفق نظام حماية البيانات الشخصية من حيث الغرض والأساس النظامي والشفافية والأمن والحقوق والنقل الدولي. لا يُفترض تطابق القواعد مع نظام ملفات الارتباط الأوروبي.
同意记录包含随机 ID、国家/地区、语言、政策版本、类别偏好和时间信息。 该记录不存储原始 IP 地址。
国家官方消息来源
In force
Personal Data Protection Law — نظام حماية البيانات الشخصية
Assess lawful processing, transparency, data rights, security and international-transfer rules. Cookie processing requires a purpose/basis assessment under PDPL.
Processing in the Kingdom and processing of residents’ personal data from abroad, subject to exceptions.
Apply relevant NCA security controls and retain evidence where in scope. Other businesses are encouraged to use the controls; no universal SME audit mandate is claimed.
Government entities/affiliates and private entities owning, operating or hosting critical national infrastructure; assess current detailed applicability.
National Cybersecurity Authority · 2026-10-23官方来源↗In force
Cloud Cybersecurity Controls — CCC 2-2024
Cloud controls extend ECC; assess provider/tenant responsibilities and current localization provisions.
Cloud service providers and cloud service tenants covered by NCA scope and applicable services.
National Cybersecurity Authority · 2026-10-23官方来源↗