Before Processing any Personal Data, the Controller must notify the Data Subject in writing of: (a) the details of the Controller and Processor; (b) contact details of the Personal Data protection officer; (c) the purpose of Processing and the source from which the Personal Data was collected; (d) a comprehensive and accurate description of the Processing, its procedures and the levels of disclosure of Personal Data; (e) the Data Subject's rights, including access, rectification, transfer and updating; (f) any other information necessary to satisfy the conditions for Processing.
This article belongs to the source version of Royal Decree 6/2022. Amendment 68/2026 has not yet been incorporated into the published article-by-article text. Interpretation and application must be checked against the official Arabic text and the current version.