Facts Breach Notification:[20] In The occasion of a knowledge breach, the controller ought to notify the supervisory authority “with no undue hold off” and inside seventy two hrs of identifying the breach, the place feasible. Any delay needs to be spelled out. In observe, this 72-hour deadline might be tricky https://medium.com/@cybersecurityservice/data-privacy-compliance-in-saudi-arabia-ed1d6e9bc078