Self-paced · 10 lessons · 12 hours
PDPL Compliance: Saudi Personal Data Protection Law
Leave with a data protection policy and a record of processing activities, ready to apply in your organization.
What you will learn
After this course, you will be able to:
Determine whether your organization falls under the law, and exactly what it requires.
Write a data protection policy that fits your organization's activity.
Build a record of processing activities and set the legal basis for each one.
Handle data subject requests and breaches within the legal deadlines.
Assess transfers of data outside the Kingdom, and when they are allowed.
The program
Five modules, ending in a workshop where you write the policy and processing record for your organization.
- Modules
- 5
- Lessons
- 10
- Duration
- 12 hours
- Suggested pace
- About three weeks
- Level
- Beginner to intermediate
The law and its regulations: who it applies to, and when
2 lessonsLegal bases for processing, and consent
2 lessonsData subject rights and requests
2 lessonsIncidents, breaches and transfers outside the Kingdom
2 lessonsWorkshop: the policy and processing record for your organization
2 lessons
Every lesson is a few short pages, and every page has an activity that checks your understanding before you move on.
What sets this course apart
Supervised by
Sultan Al-Mutairi
Compliance and data protection advisor to the financial and health sectors
Twelve years in governance and compliance, leading PDPL compliance projects for financial and healthcare organizations.
He designed, reviewed and approved this course before publication, around what leaders actually ask: what applies to us, where do we start, and how do we prove we comply.
- Last role
- Compliance and data protection advisor
- Experience
- 12 years in governance and compliance
- His role in this course
- Designs, reviews and approves the content
Presented by ZERAX trainers
AI-generated characters
MahaZERAX virtual trainer 
AliZERAX virtual trainer 
KhloodZERAX virtual trainer
This course is presented by AI-generated characters. If the format is not for you, get a full refund automatically within 7 days, unless you have read 30% of the training.
Who this course is for
- Compliance, legal and data protection officers.
- IT and security managers whose systems process customer data.
- Owners of small and medium businesses that collect personal data.
Who it is not for
- Anyone looking for technical training in encryption or network security.
- Anyone who needs legal advice on a specific case; the course does not replace it.
Before you start
Question not here? Contact us.
Do I need a legal background?
No. The law is explained in terms of decisions and actions, with ready templates you adapt to your organization.
How much time do I need each week?
Four hours a week finishes it in about three weeks. Go faster or slower; the course is yours with no time limit.
Does it keep up with amendments to the law?
Yes. Lessons are reviewed with every amendment the competent authority issues, and every update reaches you at no cost.
What do I get at the end?
A data protection policy and a record of processing activities for your organization, written in the final workshop, and a completion certificate with a verification link.
Can I get a refund?
Yes. You get a full refund automatically within 7 days, unless you have read 30% of the training.
Can I buy it for a team?
Yes. Companies get team seats and completion reports for every department. See the companies page.
Start today, and build your organization's compliance step by step.
SAR 250 per learner. Full refund within 7 days, unless you have read 30% of the training.
Buy now Try the first lesson free