Executive Regulation of the Personal Data Protection Law — Article 3

A Controller may contract with a Processor to process Personal Data. In dealings with third parties concerning those services, the Processor acts on behalf of the Controller for civil liability and administrative liability before the Ministry, without prejudice to the Processor's criminal liability for violations of the Law or this Regulation.

Interpretation and application must be checked against the official Arabic text and the current version.