For article 5 of the Law, a Controller must obtain a Ministry Permit before Processing the specified categories of Personal Data, using the prescribed form and stating: the data protection officer's name, address and email; the purpose; the categories of data; any Processor; recipients or third parties; locations of transfer or storage; data management and protection systems; and any other information requested by the Ministry.
Interpretation and application must be checked against the official Arabic text and the current version.