Saudi Cultural Missions Theses & Dissertations
Permanent URI for this communityhttps://drepo.sdl.edu.sa/handle/20.500.14154/10
Browse
3 results
Search Results
Item Restricted Saudi Millennials' Privacy Practices in the Age of the Personal Data Protection Law(Royal Holloway, University of London, 2024-08) Almutairi, Abdullah Ayed; Murphy, SeanExecutive summary The project's objective is to assess the impact of Saudi Arabia's implementation of the Personal Data Protection Law (PDPL) on Saudi millennials' data privacy practices. Specifically, the study aims to (1) examine the level of awareness among Saudi millennials regarding the PDPL and the rights they have acquired under it; (2) assess their attitudes towards the effectiveness of the PDPL in protecting their personal data; and (3) investigate any changes in their personal data practices following the implementation of the PDPL. The project utilizes a quantitative methodology, using the Knowledge-AttitudePractice (KAP) model as a framework. We obtained data from a sample group of Saudi millennials by means of a survey. The survey was created with the purpose of assessing the participants' knowledge of the PDPL, their views on its effectiveness, and their individual handling of data practices following its implementation. We tested the research hypotheses and derived significant conclusions from the data through the application of statistical analysis, which encompassed both inferential and descriptive techniques. Key findings reveal that a large percentage of Saudi millennials lack an adequate understanding of the PDPL. Nevertheless, individuals with a sufficient level of awareness regarding the PDPL tended to follow better privacy practices. The findings also indicated that participants who were knowledgeable about the PDPL exhibited favourable attitudes towards its efficacy in enhancing personal data protection measures in Saudi Arabia. The project found that familiarity with the PDPL and appropriate perceptions of its efficacy resulted in an inclination to adhere to better practices. In conclusion, the implementation of the PDPL had an influence on the data privacy practices of Saudi millennials who were knowledgeable about it and its specifics. However, it is imperative to enhance awareness campaigns in order to augment the number of individuals who are knowledgeable about the PDPL and their rights under it. This will ultimately enhance privacy practices among Saudi citizens. The findings overall show that more awareness of the PDPL leads to improved privacy practices.31 0Item Restricted Assessment of Inclusive Public Participation in the Personal Data Protection Law Amendment in The Kingdom of Saudi Arabia(London School of Economics and Political Science, 2024-05-07) Alanazi, Ghaida; Grand, Julian LeThe Kingdom of Saudi Arabia introduced the first technology law during Vision 2030; the Personal Data Protection Law (PDPL) in September 2021. The first version of the law was never implemented for many reasons. The government issued a royal decree extending the deadline for implementation, and the data regulator initiated a deliberative process for the PDPL Amendment. This study uses a theoretical procedural fairness framework to evaluate public participation and inclusiveness in the amendment process. Public consultation and deliberation are the most differentiating factors between the first development of the law amendment process. The evaluation of inclusiveness and public participation is contrasted with the experiences in the GDPR development and UK GDPR public consultation process since the UK only amended GDPR post-Brexit. This study does not offer a direct comparison to these international experiences but verifies the completeness of the Saudi experience. The study gathers data mainly from interviews with officials who significantly contributed to the amendment of the PDPL. The process to amend the PDPL resulted in a new regulatory approach that aligns with the GDPR best practices. It resolved the main issues highlighted during a process of private and public consultation. This study offers a nuanced view on the tools that facilitated engagement with different stakeholders in the pursuit of amending the law to meet diverse set of objectives including resolution no. 713 established the first requirement for evidence-based policymaking and required a call for public consultation in the event of the law amendment. The embedded Vision 2030 policies and procedures that implement collaborative cooperation inside the government organized unofficial working groups that collaborated to advocate for a diverse set of objectives presented in the feedback from non-government organizations. The highly iterative deliberation process during the private consultation phase enabled different parties to scrutinize conclusions and improve deliberation outcomes. Initiatives from different officials allowed the interests of vulnerable groups to be evaluated. These factors helped develop a shared understanding between different stakeholders during the private and public consultation periods. However, the separation of private and public consultations limited transparency and might have jeopardized the effort to include different voices. The effect of this approach to law amendment will require further assessment through interviews with non-government stakeholders.40 0Item Restricted Personal Data Protection: Does the current legal framework correctly balance the competing interests of data controllers and subjects, especially as regards the use of the ‘legitimate interest’ justification? With a special focus on the EU & UK GDRP and the Saudi PDPL(University Of Reading, 2023-09-29) Alkhalifa, Shatha; Yong, HanWith the speed of technological development, data has become a commercial, high-value product. In general, the value and control of a product belongs to its owner, the data subject. However, non-consensual external use of our personal data is exposing us to potential threats. Different countries have adopted laws to protect citizens' data, such as the UK General Data Protection Regulation (GDPR), the EU GDPR and the very recently implemented Personal Data Protection Law (PDLP) in the Kingdom of Saudi Arabia (KSA) However, these laws also grant considerable freedom to data controllers, allowing the use of personal data, without the data owner's permission, under certain provisions. One of the most controversial is the grounds of ‘legitimate interest’. This requires finding the right balance between the interests of the data controllers and the data owners. As such, this research studies the balancing exercise that needs to be delicately handled. This dissertation will mix different methodologies, namely the doctrinal methodology in terminologies and the international approach and descriptive analysis to examine the legal texts. A comparative methodology will be used to compare the GDPR transcripts with the new Saudi regulation. This study finds similarities and differences in the legitimate interest concept in the EU, the UK, and the Kingdom of Saudi Arabia, with a broad uncertainty in how legitimate interest should be defined. The role of data subject expectation is analysed. However, the research highlights that public entities should not use the legitimate interest base while it has already a public interest as a legal ground. Also, the importance of data ownership even after death, as under Saudi law, receive special attention. Finally, Saudi law also leads the way in an important focus, namely that direct marketing is purely a commercial activity and should not be prioritized over the private individual interest.30 0