Executive Regulation of the Personal Data Protection Law — Article 18

A Data Subject may request erasure when the Processing purpose has ended, consent is withdrawn subject to article 17, or Processing violates the Law or Regulation. The Controller may refuse where retention is required by a legal obligation, judgment or judicial decision, or where a dispute exists between the Controller and Data Subject.

Interpretation and application must be checked against the official Arabic text and the current version.