Cctv Privacy Notice Template for Saudi Arabia

When you operate CCTV cameras in Saudi Arabia, you must provide clear notice to individuals about your surveillance activities. A CCTV Privacy Notice is your legal obligation under the Personal Data Protection Law (PDPL) and serves as the primary communication tool between your organization and the people whose images you capture. This document must be prominently displayed at entry points and throughout areas under surveillance, ensuring everyone understands how their personal data is being processed.

When do you need this document?

You need a CCTV Privacy Notice whenever you install video surveillance cameras that capture identifiable images of individuals. This applies to retail stores monitoring customer areas, office buildings with lobby cameras, parking facilities with security surveillance, residential complexes with common area monitoring, and educational institutions with campus security systems. The notice is required before you begin recording, not after you've already collected footage. Whether you're a private business, government entity, or residential management company, Saudi Arabian law mandates this disclosure whenever personal data is processed through video surveillance.

Key legal considerations

Your CCTV Privacy Notice must clearly identify the legal basis for surveillance under PDPL, typically legitimate interest for security purposes or legal compliance. You must specify exactly what data you collect, including video footage, timestamps, and any associated metadata. The notice should detail your data retention period, explaining how long footage is stored before deletion or anonymization. You must outline individuals' rights, including their ability to request access to footage containing their image, seek corrections to associated data, and lodge complaints with the Saudi Data & Artificial Intelligence Authority (SDAIA). Additionally, if you share footage with third parties like security companies or law enforcement, this must be clearly disclosed along with the legal basis for such sharing.

Legal requirements in Saudi Arabia

Saudi Arabia's PDPL requires that your CCTV Privacy Notice be written in clear, understandable Arabic, though bilingual notices are acceptable for international organizations. The notice must be displayed prominently at all entry points where surveillance occurs, and you must ensure it remains visible and legible at all times. SDAIA regulations mandate that you conduct and document a privacy impact assessment for your surveillance system, and your notice must reflect the findings of this assessment. You must also establish procedures for handling data subject requests within the 30-day timeframe specified by PDPL. The notice should include contact information for your designated data protection officer or responsible person, enabling individuals to exercise their privacy rights. Regular updates to your notice are required whenever you modify your surveillance system, change retention periods, or when regulatory requirements evolve.