��������Ƶ

1. International Data Transfers: Required if employee data is transferred outside Saudi Arabia, detailing the legal basis and safeguards for such transfers

2. Specific Industry Requirements: Additional privacy requirements for specific sectors (e.g., financial services, healthcare)

3. Automated Decision Making: Required if the organization uses automated processing to make decisions about employees

4. CCTV and Monitoring: Required if workplace surveillance or monitoring systems are in place

5. Remote Working Data Processing: Required if employees work remotely and specific data processing rules apply

1. Schedule 1: Detailed Data Categories: Comprehensive list of all types of personal data collected, categorized by purpose and sensitivity

2. Schedule 2: Third Party Processors: List of approved third-party data processors and their roles

3. Schedule 3: Technical Security Measures: Detailed description of security protocols and measures implemented to protect personal data

4. Schedule 4: Data Retention Schedule: Detailed retention periods for different categories of personal data

5. Appendix A: Privacy Rights Request Form: Standard form for employees to exercise their data privacy rights

6. Appendix B: Data Breach Response Protocol: Procedures and contact information for reporting and handling data breaches