Executive Regulation of the Personal Data Protection Law — Article 24

The Controller and Processor must provide the Competent Department with a copy of the external auditor's report within 60 days of the auditor's appointment.

Interpretation and application must be checked against the official Arabic text and the current version.