Executive Regulation of the Personal Data Protection Law — Article 40

The Ministry may request a copy of the Controller's assessment report to verify adequate protection by the foreign Processing entity.

Interpretation and application must be checked against the official Arabic text and the current version.