Executive Regulation of the Personal Data Protection Law — Article 27

Subject to article 18, Processing records must be retained for a specific lawful reason, for a period proportionate to the Processing purpose, and under technical safeguards ensuring secure retention.

Interpretation and application must be checked against the official Arabic text and the current version.