Rule · SAMA · 19 Jun 2022
Banks and financial institutions operating in the Kingdom must complete all Data Quality Improvement Project requirements and comply with data sharing via the agreed transmission mechanism with Saudi Payments. These obligations must be fulfilled within 20 working days, with adopted procedures submitted to BusinessOps@saudipayments.com. Compliance must also adhere to the Personal Data Protection System issued by Royal Decree No. (19/M) dated 9/2/1437 AH regarding personal data preservation and sharing.
Saudi Central Bank (SAMA)
Reference No.: 43096118
Date: 20/11/1443 AH
Attachments: None
Circular
To Whom It May Concern,
Subject: Data Quality Improvement Project in the E-commerce Sector in the Kingdom.
Based on the duties and powers delegated to the Saudi Central Bank under the Saudi Central Bank System issued by Royal Decree No. (37/M) dated 11/4/1427 AH, and the Banking Control System issued by Royal Decree No. (5/M) dated 22/2/1386 AH, and referring to Circular No. (391...70...5) dated 2/7/1439 AH regarding the availability of online purchasing services via Mada bank cards, and in light of the growth of the e-commerce sector in the Kingdom and the desire to improve the mechanism for collecting data related to e-commerce,
The Saudi Central Bank emphasizes all banks and financial institutions on the importance of complying with the operational framework, technical rules, and operational rules regarding the Data Quality Improvement Project, which was shared with all banks and financial institutions in April 2022 by Saudi Payments, taking into account compliance with the following:
First: Completing all requirements mentioned in the operational framework, technical rules, and operational rules related to the Data Quality Project.
Second: Complying with data sharing based on the agreed-upon data transmission mechanism with Saudi Payments.
To respond and act accordingly as of its date, while emphasizing compliance by all parties with the provisions of the Personal Data Protection System issued by Royal Decree No. (19/M) dated 9/2/1437 AH regarding the preservation, collection, processing, and sharing of personal data; with the requirement to complete the requirements and comply with the above within (20) working days, and to provide Saudi Payments with the adopted procedures in this regard via email: BusinessOps@saudipayments.com
Yours sincerely,
Eng. Hassan bin Saeed
Yared bin Ahmed Al-Sheikh
General Manager of Banking Supervision
Distribution Scope:
P.O. Box 2992 Riyadh 11169, Kingdom of Saudi Arabia Tel: +966 11 463 3000
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
RegAlert holds no document that amends or replaces this one. This is not a check that it is in force: confirm with the regulator.
“Based on the duties and powers delegated to the Saudi Central Bank under the Saudi Central Bank System issued by Royal Decree No. (37/M) dated 11/4/1427 AH”
“and the Banking Control System issued by Royal Decree No. (5/M) dated 22/2/1386 AH”
More like this from SAMA
We email you every new SAMA publication the day it's published.
Source: Saudi Central Bank — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated