Saudi Arabia · Regulation guide
NDMO Data Management & Personal Data Protection Standards
Issued by National Data Management Office (NDMO), part of SDAIA
Applies to: Government entities in Saudi Arabia, and organisations that handle government data on their behalf.
The NDMO standards define how government entities govern and manage data. They span domains such as data governance, data quality, data classification, metadata, data sharing, open data, freedom of information and personal data protection.
Entities are expected to set up data management roles and policies, measure their compliance, and report progress.
General guidance, not legal advice. Always confirm scope and current requirements with the issuing authority.
Discuss NDMO standards with us
Gap assessment, control mapping or evidence tracking.
How we help
- ✓Data governance roles and policies
- ✓Compliance assessment against the NDMO domains
- ✓Data classification and inventory
- ✓Alignment with PDPL and NCA DCC
Related ISO standards
NDMO standards questions
Is this legal advice?+
No. This is a general overview. Confirm scope, the current edition and your obligations with the issuing authority and your legal or compliance advisers.
Next step
Where does your programme stand?
The GRC maturity check takes three minutes and shows which areas to fix first.