Where a Personal Data breach results in unlawful destruction, alteration, disclosure, access or Processing, the Controller must notify the Ministry and the Data Subject of the breach in accordance with the controls and procedures prescribed by the Regulation.
This article belongs to the source version of Royal Decree 6/2022. Amendment 68/2026 has not yet been incorporated into the published article-by-article text. Interpretation and application must be checked against the official Arabic text and the current version.