# Saudi Arabia PDPL compliance.

- Canonical URL: https://www.broadnet.me/compliance/pdpl-saudi
- Language: en
- Publisher: BroadNet (https://www.broadnet.me)
- Markdown version of the page above, generated from the rendered page.

COMPLIANCE

Last reviewed · March 22, 2026 Audit cycle · annual surveillance Document · /compliance/pdpl-saudi

On this page

Verify the certificate

Audit letters, certificate copies, and bridge letters available to evaluators under NDA.

[Request evidence](mailto:legal@broadnet.me)

## Overview

Saudi Arabia's Personal Data Protection Law (PDPL) is effective from 2023 with full enforcement from 2024. BroadNet complies with consent, data minimization, cross-border transfer restrictions, and 72-hour breach notification requirements.

§01

## Definitions

Audit and compliance terminology referenced on this page is defined below. Where definitions diverge from a specific framework, the framework standard prevails for that attestation.

Quick reference

**Scope statement**

The systems, processes, and locations covered by the attestation. Out-of-scope items are explicitly excluded.

**Surveillance audit**

Annual reassessment between full certification cycles to confirm controls remain effective.

**Type I vs Type II**

Type I attests to control design at a point in time. Type II attests to operating effectiveness over a period.

**Bridge letter**

Auditor confirmation that no material changes have occurred between the end of the audit period and the letter date.

## Questions?

Questions on this attestation, scope, or certificate verification? Our legal and security teams co-own compliance correspondence.

[legal@broadnet.me](mailto:legal@broadnet.me)

BroadNet Technologies Sarl · Dubai, UAE · Operating since 2003

Related documents

## Continue reading

[All trust documents](https://www.broadnet.me/trust)

[Document Regulations · Saudi Arabia](https://www.broadnet.me/regulations/saudi-arabia)