The Council of Health Insurance has urged accredited healthcare service providers to register on the National Data Governance Platform operated by the Saudi Data and AI Authority (SDAIA) to ensure compliance with the Personal Data Protection Law.
This initiative is part of a broader effort to safeguard the personal data of health insurance beneficiaries, including those served by hospitals, pharmacies, medical complexes, laboratories, and health centers across the Kingdom.
Registration Mandate for Healthcare Providers
The Council of Health Insurance’s call to action is grounded in Article 2 of the Rules Governing the National Register of Controllers within the Kingdom, which aims to create a unified national registry to monitor adherence to data protection regulations.
By registering on the National Data Governance Platform, healthcare providers will be able to demonstrate their commitment to protecting sensitive patient information and comply with the Personal Data Protection Law, according to the Council.
Services Offered by the National Data Governance Platform
The platform provides a range of tools and services designed to support entities in managing personal data responsibly.
These include a self-assessment compliance tool, a mechanism for reporting personal data breaches, privacy impact assessments, and a channel for submitting complaints related to personal data processing.
Enhancing Data Protection Awareness
The collaboration between the Council of Health Insurance and SDAIA underscores the importance of raising awareness about data protection among healthcare providers.
By working together, they aim to foster a culture of data privacy and security within the healthcare sector, ultimately enhancing the protection of beneficiaries’ personal data.
Accredited healthcare service providers are encouraged to register on the platform through the link: https://dgp.sdaia.gov.sa/wps/portal/pdp/Registration/private, to benefit from its electronic services.
Failure to register may result in regulatory action, as outlined in Article 36 of the Personal Data Protection Law, the Council warned.
As the registration process moves forward, it is expected that more healthcare providers will comply with the Personal Data Protection Law, contributing to a more secure data environment for health insurance beneficiaries.
The next steps in this initiative are likely to involve ongoing monitoring and evaluation of compliance, with potential further guidance from the Council and SDAIA.

