Executive Regulation of the Personal Data Protection Law — Article 31

After receiving an article 30 notice, the Competent Department may record it and: assess the Controller's measures and whether they address the harm; direct notification of the Data Subject without prejudice to article 32; and provide guidance or available support.

Interpretation and application must be checked against the official Arabic text and the current version.