Law / Saudi Arabia

Personal Data Protection Law, right to stop marketing and advertising

Royal Decree No. M/19, Art. 25; Implementing Regulations Arts. 28-29

In force.

A data subject rights rule binding public and private bodies.

Audit expectation
none

What it requires

  • An app that sends advertising, awareness or direct marketing material to an individual in Saudi Arabia must give the individual a free mechanism to stop receiving it that is as simple and easy as the procedure for consenting, and must stop sending as soon as the individual asks or withdraws consent.

These lines are LexLint's reading of the law's text.

What it makes you log

What the log must hold

Consent or opt-out state

Logging duty

Article 28(3)(e) requires the Controller to keep material evidence of the targeted recipient's consent to receive advertising or awareness material. It names no format, retention period or recipient of the evidence.

Kind
Implicit
As of
Provision
Implementing Regulations Article 28(3)(e)
Trigger
consent_or_optout

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Law Article 25 bars a Controller from using a Data Subject's personal means of communication, including post and email, to send advertising or awareness-raising materials unless the conditions it lists are met. Law Article 25(2) makes it a condition that the sender provide a clear mechanism, as set out in the Regulations, that enables the targeted recipient to request stopping such materials.

Implementing Regulations Article 28(3)(c) requires a Controller to halt sending advertising or awareness material immediately upon the targeted recipient's request. Implementing Regulations Article 28(3)(d) provides that halting reception of advertising or awareness material is free of charge. Implementing Regulations Article 29(3) requires a Controller to halt sending marketing material without undue delay when the Data Subject withdraws their consent for Direct Marketing.

When LexLint raises it

When your app profile says your app sends automated outreach or processes personal data.

Back to the example  ·  Lint your app

Page updated .