Executive Regulation of the Personal Data Protection Law — Article 2

The Controller or Processor, as applicable, must provide the Competent Department with any requested documents, data, information or other material within 30 days from the request.

Interpretation and application must be checked against the official Arabic text and the current version.