GCC regulations / Law or regulation

NDMO Data Management and Personal Data Protection Standards (SDAIA)

SDAIA’s national standards for data governance, classification, quality, sharing and personal data protection across 14 domains.

The National Data Management Office (NDMO), part of the Saudi Data and AI Authority (SDAIA), publishes the Data Management and Personal Data Protection Standards. They cover data governance, catalogue and metadata, quality, operations, classification, sharing and interoperability, reference and master data, analytics, open data, freedom of information and personal data protection.

We assess your maturity across the domains, set up the governance, prioritise the P1 controls and build the KPIs and evidence needed for compliance reporting, joined up with your PDPL and NCA DCC work.

Who it is for

  • Saudi government entities
  • Private companies that manage, process or store government data
  • Organisations building data governance alongside PDPL compliance

What you gain

  • A data governance programme the regulator recognises
  • Data classification and sharing rules that support PDPL
  • A phased plan across the P1, P2 and P3 priorities

How we get you compliant

  1. Data maturity review

    Assess your current data governance across the NDMO domains and agree priorities.

  2. Governance set-up

    Data office, roles, policies and a data management plan that fit your organisation.

  3. Priority controls

    Implement P1 controls first, such as classification, data protection and metadata, then plan P2 and P3.

  4. KPIs and compliance reporting

    Set up the measures and evidence needed for NDMO compliance monitoring and audits.

NDMO Data Standards questions

How large are the NDMO standards?
They cover 14 data management and personal data protection domains with 77 controls and 191 specifications, grouped into P1, P2 and P3 priorities for phased implementation.
Do private companies need to comply?
Yes, where they manage, process or store government data on behalf of public entities. Others use the standards as a practical data governance model alongside the PDPL.

Ready to start on NDMO Data Standards?

Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.