tiktok���˰�

1. International Data Transfers: Required when personal data will be transferred outside Saudi Arabia, detailing compliance with PDPL cross-border requirements

2. Data Processing by Third Parties: Include when third-party processors will handle the personal data

3. Special Categories of Personal Data: Required when processing sensitive personal data as defined under PDPL

4. Automated Decision Making: Include when automated processing or profiling is used

5. Child Data Protection: Required when processing personal data of individuals under 18 years

6. Direct Marketing: Include when personal data will be used for marketing purposes

7. Data Protection Impact Assessment: Required for high-risk processing activities

8. Insurance and Liability: Include when specific liability allocation and insurance requirements are needed

1. Schedule 1 - Categories of Personal Data: Detailed list of all personal data categories to be processed

2. Schedule 2 - Technical and Organizational Security Measures: Detailed description of security measures and controls

3. Schedule 3 - Approved Sub-processors: List of approved third-party data processors, if applicable

4. Schedule 4 - Data Processing Activities: Detailed inventory of processing activities and purposes

5. Schedule 5 - Data Retention Schedule: Specific retention periods for different categories of data

6. Appendix A - Consent Forms: Template consent forms in Arabic and English

7. Appendix B - Data Subject Request Forms: Standard forms for exercising data subject rights

8. Appendix C - Breach Response Plan: Detailed procedures for handling data breaches