The National Water Efficiency and Conservation Center (maee.gov.sa) recognizes the importance of your privacy and personal data. Therefore, we are committed to maintaining all important information and data for all users in a safe, secure, and confidential manner.
The privacy policy and procedures of maee.gov.sa are subject to the Personal Data Protection System issued under Royal Decree No. (M/19) dated 9/2/1443 AH, and the key principles of personal information protection, as well as the general rules for data exchange issued by the Saudi Data and Artificial Intelligence Authority and the National Data Management Office.
The Personal Data Protection System and its implementing regulations establish the legal framework for protecting your rights regarding the processing of personal data by all entities within the Kingdom, as well as all entities outside the Kingdom that process personal data related to individuals residing in the Kingdom using any means, including processing personal data online.
The core principles of our data protection policy include:
- The entity’s head for the privacy policies and procedures of the data controller.
- Transparency through a privacy notice indicating the purposes for which personal data is collected.
- Choice and consent obtained through implicit or explicit consent regarding the collection, use, and disclosure of personal data prior to collection.
- Limiting data collection to the minimum required for achieving the purposes.
- Use, retain, and securely destroy data for its intended purpose, following the necessary duration as per laws and regulations. Secure destruction methods should be implemented to prevent leaks, loss, theft, misuse, or unauthorized access.
- Access to data allowing any data subject to review, update, and correct their personal data.
- Disclosure limitations approved by the data subject, restricting third parties to the purposes specified in the privacy notice.
- Data security involves safeguarding personal data against leaks, damage, loss, theft, misuse, unauthorized access, and unauthorized alteration in accordance with regulations set forth by the National Cybersecurity Authority and relevant governing bodies.
- Data quality is ensured by verifying accuracy, completeness, and timeliness.
- Monitoring the compliance of data controller privacy policies and procedures, and handling privacy-related inquiries, complaints, and disputes.
The national standards for data management and personal data protection cover 15 areas of data management and personal data protection, and these standards are applicable to all forms of government, such as paper records, email correspondence, electronic information, audio and video recordings, maps, images, scripts, handwritten documents, and other recorded data.
The Personal Data Protection Law and its implementing regulations do not diminish the authority of the National Cybersecurity Authority, which maintains its prerogatives as the competent entity overseeing cybersecurity and related matters in the Kingdom.
