Lawful basis & purpose
Document processing purposes and lawful grounds.
- Consent
- Contract
- Legal obligation
KSA privacy, PDPL
PDPL: Personal Data Protection
Saudi Arabia's Personal Data Protection Law and Gulf privacy expectations more broadly. Sentinel Unity models processing activities, assessments, and remediation alongside cyber GRC, configurable to your jurisdiction's requirements.
Enforced by national data protection authorities · Applies to in-scope processing in KSA
Active
Enforcement
Breach
Notification duties
Cross-border
Transfer controls
Subject
Rights management
Core obligations
PDPL program areas in the platform
Data inventory & classification
Categories, purposes, and retention for personal data.
- Processing records
- Retention
- Classification
Consent management
Collect, record, and honour consent and withdrawal.
- Explicit consent
- Withdrawal
- Records
Cross-border transfers
Controls for data leaving the Kingdom or entity jurisdiction.
- Transfer records
- Safeguards
- Approvals
Breach notification
Incident workflows with regulatory and individual notification steps.
- Discovery
- Authority notification
- Individual notice
Data subject rights
Access, correction, deletion, and portability requests.
- Request intake
- Response tracking
- Evidence
Platform mapping
How the platform supports PDPL programs
Processing activity register
Model processing as structured records with owners and risk scores.
PDPL assessment templates
Structured assessments with evidence and gap reporting.
Breach response workflow
Timeline tracking, notifications, and lessons learned.
Cross-framework mapping
Align privacy controls with ISO 27001 and national cyber frameworks.
Manage PDPL obligations alongside cyber GRC
Book a demo with our GRC specialists to see how Sentinel Unity supports programs across the Gulf.
No commitment required. Typical demo is 45 minutes.