Saudi Arabia. Cybersecurity. Regulatory controls
DCCNCA Data Cybersecurity Controls (DCC)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Controls for protecting data across its lifecycle at covered entities, scaled by data classification.
- Key themes
- Unique features
Builds on ECC with classification-specific data security controls.
- SaaS relevance
Applies via contract to SaaS processing classified data for Saudi government/CNI.
§2Obligations
- Extraterritorial
- Limited
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text nca.gov.sa
- Authority
- National Cybersecurity Authority (NCA)
§5Where it applies
- Domestic law of
- Saudi Arabia
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.