Data privacy in Saudi Arabia is governed by the Personal Data Protection Law (PDPL) issued in 2021 and enforced by the National Data Management Office (NDMO). The PDPL requires businesses to obtain consent before collecting personal data, protect data from unauthorized access, ensure data accuracy and report data breaches within specified timeframes. HR data — employee records, payroll information and Iqama details — is among the most sensitive categories of personal data held by organizations. Cloud HR platforms must also meet data residency requirements. Inclusive Solutions advises on HR data privacy compliance as part of its technology and consultancy services.