Privacy Policy
The Ministry of Economy and Planning is a government entity established pursuant to the Royal Decree issued in 1953. The Ministry is responsible for regulating economic affairs in the Kingdom of Saudi Arabia and developing development plans that are aligned with the vision of decision-makers in the Kingdom. The Ministry aims to enhance economic growth and develop economic policies in a manner that contributes to achieving sustainable development and improving quality of life.
To protect the user’s personal data and information, the Ministry is committed to maintaining the confidentiality and privacy of such data and using it to reach the desired level in providing the necessary services to the user, in accordance with the terms and conditions applicable in the Kingdom of Saudi Arabia. This Privacy Policy aims to inform the Personal Data Subject of the general rules regarding how their personal data is processed and shared, the rights of the Personal Data Subject, the mechanism for exercising such rights, the personal data collected, the methods of collecting it, the purposes of using it, in addition to the legal bases for collecting and processing data.
By using the Ministry’s website and its affiliated platforms and applications, you acknowledge that you have reviewed and agreed to the Privacy Policy and any ongoing amendments made to it as required and according to the nature of work.
The Ministry takes appropriate and suitable procedures and measures to securely preserve the personal data it holds, ensuring its protection from loss, unauthorized access, misuse, unauthorized modification and disclosure.
The latest update to the Privacy Policy was made on [7/7/2026]. The Ministry also reserves the right to make any amendment to the Privacy Policy from time to time. Website visitors and beneficiaries of the Ministry’s services must continuously review such amendments, which will be available through the website, as such amendments shall be deemed effective from the date of their publication.
The following words and phrases, wherever mentioned in this Policy, shall have the meanings indicated below, unless the context requires otherwise:
| Term | Definition |
| The Ministry | Ministry of Economy and Planning |
| The Law | The Personal Data Protection Law issued by Royal Decree No. (M/19), dated 9/2/1443H, and any amendments thereto |
| The Regulations | The Executive Regulations of the Law |
| The Policy | The Privacy Policy for the Ministry’s website and its affiliated platforms and applications |
| Platforms and Applications | The platforms, services, applications and artificial intelligence generation tools affiliated with the Ministry |
| Personal Data | Any data, regardless of its source or form, that would lead to identifying an individual specifically, or make it possible to identify them directly or indirectly, including: name, personal identification number, addresses, contact numbers, license numbers, records and personal properties, bank account and credit card numbers, still or moving images of the individual, and other data of a personal nature |
| Personal Data Subject | The individual to whom the personal data relates |
| Legal Basis | The legal basis upon which the Ministry relies in its activities that require the collection and processing of personal data |
| Processing | Any operation performed on personal data by any means, whether manual or automated, including: collection, recording, preservation, indexing, arrangement, organization, storage, modification, updating, merging, retrieval, use, disclosure, transfer, publication, data sharing or interconnection, blocking, erasure, and destruction |
| Collection | The Ministry’s obtainment of personal data in accordance with the provisions of the Law, whether collected directly from the Personal Data Subject, their representative, legal guardian, or from another party |
The Ministry collects the necessary personal data of website visitors and users of the services of the platforms and applications, directly or indirectly. Personal data includes the following categories:
Basic personal data, including, but not limited to:
- Full name
- Gender
- Nationality
- Date of birth
- Type and number of national ID
- Qualification
- Job title / workplace
- Curriculum vitae
- Bank account information included in an IBAN certificate
- Family information, including marital status, spouse data, and dependents’ data
Contact data, including, but not limited to:
- Phone numbers
- Email address
- National address
Technical data and Cookies: Upon visiting the platforms and applications, the Ministry’s server records the user’s Internet Protocol (IP) address, the date and time of the visit, and the URL of any website from which the user was referred to the website. The stored information includes:
- The username and password may be remembered if this is available on the website
- Page settings may be saved if this is available on the website
- Colors selected by the user may be saved if this is available on the website
Additional data may be requested depending on the service to be used
The Ministry is keen to collect the minimum amount of personal data, whether directly or indirectly, in accordance with the Law and its Regulations in the Kingdom of Saudi Arabia, as follows:
- Data collected directly includes recording the Internet Protocol (IP) address, the date and time of the visit, in addition to the URL of the website that referred the user to the platforms and applications through Cookies
- Direct collection of data through information provided by the user to the Ministry
- Data may be imported from various government/private entities integrated with the Ministry’s systems
- External parties in accordance with the issued legislation and applicable laws in force in the Kingdom of Saudi Arabia
By providing your personal data and information through the platforms and applications, you consent to the storage, processing and use of such data by the Ministry and government entities in the Kingdom of Saudi Arabia. You are also solely responsible for the completeness, accuracy and truthfulness of the data you submit through platforms and applications
The Ministry also collects personal data through several means, and is committed to ensuring that it is collected only for the specified purposes and based on approved legal bases in accordance with the Law and Regulations, as follows:
Improving services and user experience according to the following purposes:
- Personal data is used to analyze user behavior and diagnose problems, which helps improve the user experience and ensure that the platforms and applications effectively meet their needs
- Personal data is used for research purposes, the Ministry’s data analysis, problem diagnosis, and issuance of statistical reports that would improve the user experience and ensure that the platforms and applications effectively meet their needs
Providing services and products according to the following purposes:
- Facilitating the registration process and simplifying procedures for accessing services
- Responding to opinion polls
- Conducting research operations and providing statistical reports to decision-makers
- Completing and updating user records on the platforms and applications
- Benefiting from the Ministry’s products and its affiliated platforms and applications
Responding to inquiries and requests, processing complaints and suggestions, and communication through multiple channels:
- Following up on inquiries, requests, complaints and suggestions submitted by users
- Communicating with users through multiple channels
Security protection and website monitoring:
- Personal data is used for the purpose of monitoring the use of digital platforms and applications to identify security threats and attacks that may cause harm
The Ministry is committed to processing personal data, whether automatically or manually, accurately and only to the extent necessary to achieve the purposes for which the data was collected, after taking the necessary measures in accordance with organizational controls and in compliance with the Law and Regulations
The Ministry is committed to maintaining the privacy of personal data collected directly and indirectly and not publishing or disclosing it except in accordance with the Law and Regulations. The Ministry also reserves the right to share personal data with government entities, private entities in the Kingdom of Saudi Arabia, or administrative units within the Ministry, for the purpose of providing a more effective service to the user. Without prejudice to the rights of the Personal Data Subject or what conflicts with their interests, the Ministry has the right to disclose data to the Ministry’s data processors in order to achieve a legitimate interest. The Ministry also reserves the right to share the user’s personal data with authorized entities or entities assigned to perform certain government services, for legitimate purposes and based on legal bases or justified operational needs aimed at achieving a legitimate interest, while ensuring that national interests or the privacy of individuals are not compromised. The Ministry also reserves the right to disclose any information to the competent or relevant authorities when necessary to comply with any law, accountability or inquiry
All personal data sharing operations are carried out in accordance with legal obligations and privacy requirements, while taking all necessary measures to protect the data and ensure that it is not used except for the purposes designated for it
The Ministry stores personal data securely at the Ministry’s headquarters within the Kingdom of Saudi Arabia or through secure solutions in cloud computing services in accordance with the policies and controls of the National Cybersecurity Authority, in order to ensure the prevention of unauthorized access and reduce cybersecurity risks. Data is retained according to its type and for the period that fulfills the purpose for which it was collected, as stated in Clause Four of this Policy, in accordance with the relevant laws and regulations
The Ministry, platforms and applications provide links to external websites managed by other entities, with the aim of facilitating user access to websites that may provide useful services or information. However, the Ministry does not bear any responsibility for the privacy and confidentiality policies applied on those websites, or for their performance and general impact. Users are advised to read the privacy and confidentiality policies of each website before using it
Pursuant to the Law and Regulations, the Personal Data Subject has the following basic rights in relation to personal data, which the Ministry is committed to ensuring they can exercise:
- Right to be informed: The Personal Data Subject has the right to know the purpose of collecting their personal data, the legal basis for collecting and processing it, how it is stored and destroyed, and the entities to which the user’s data will be disclosed. This Policy has been prepared to inform Data Subjects and ensure their awareness of all their rights, controls and purposes for which their personal data is collected
- Right to access personal data and request to obtain it: The Personal Data Subject has the right to request access to their personal data available to the Ministry and review it, and has the right to request a copy of their available personal data in a clear, readable format that matches the content of the records, in line with the Ministry’s authority to restrict access or specify a certain period for exercising this right
- Right to correct personal data: The Personal Data Subject has the right to request the correction of their personal data available to the Ministry if it is incorrect, or to request its completion or updating, considering the controls of this right under the Law and Regulations
- Right to destroy personal data: The Personal Data Subject has the right to request the destruction of their personal data available to the Ministry when it is no longer needed, without prejudice to the legal bases and periods for retaining it
- Right to withdraw consent to the processing of personal data: The Personal Data Subject has the right to withdraw their consent to the processing of their personal data at any time, unless there are other legal bases that require the continuation of processing
- Right to submit a complaint: The Personal Data Subject has the right to submit a complaint to the competent authority in the event of any violation of the provisions of the Law
- Right to claim compensation: The Personal Data Subject has the right to claim compensation for any material or moral damage that may be suffered as a result of committing any violation of the provisions of the Law or Regulations
The Ministry is committed to enabling the Personal Data Subject to exercise their rights related to their personal data. If they wish to exercise any of the rights mentioned above, or have any inquiry or complaint, please contact the Ministry’s Personal Data Protection Officer via the following email: (PDP@mep.gov.sa)
The Ministry will process the request and respond to the Personal Data Subject within a maximum period of (30) working days from the date of receiving the complete request
- National Data Management Office (NDMO)
- Personal Data Protection Law
-
The Executive Regulations of the Personal Data Protection Law