Without prejudice to the powers assigned to the Cyber Defence Centre, the Ministry is responsible for implementing this Law and, in particular, shall: (a) prepare and approve controls and procedures for protecting Personal Data, including necessary safeguards and measures and codes of conduct; (b) issue controls and procedures required for Processing Personal Data and verify compliance by Controllers and Processors; (c) receive and decide reports and complaints filed by Data Subjects within the period prescribed by the Regulation; (d) cooperate with authorities responsible for Personal Data protection in other states; (e) provide advice, support and coordination to units of the State Administrative Apparatus and other public legal persons on Personal Data protection matters; (f) issue and revoke licences for service providers entrusted with assessing compliance by Controllers and Processors, in accordance with the Regulation; (g) prepare guidance forms for implementing this Law whenever required; (h) prepare periodic reports on its Personal Data protection activities and publish them on its website; (i) establish a register of Controllers and Processors that satisfy the prescribed requirements, as provided by the Regulation.
This article belongs to the source version of Royal Decree 6/2022. Amendment 68/2026 has not yet been incorporated into the published article-by-article text. Interpretation and application must be checked against the official Arabic text and the current version.