​Privacy Notice

 The Ministry of Finance recognizes the importance of protecting privacy and ensuring the security of personal data. Accordingly, this Privacy Notice explains how we collect, use, and protect personal data for all concerned parties who interact with the various platforms of the Ministry of Finance.

What personal data is collected?
The Ministry of Finance collects various types of personal data to provide its services and carry out its legal and regulatory functions. The minimum amount of personal data is collected to serve its purpose. The personal data collected may include, but is not limited to, general and sensitive personal data such as:

• Name.
• Contact details (e.g. phone number, address and email).
• National ID Number.
•Family Personal Details.
• Financial Data.

 The Ministry also collects data necessary to verify eligibility for financial programs, to process payments, and to ensure compliance with regulations.

The Website is not designed to collect personal data from data subjects' computers while browsing. Any data provided shall only be used with the knowledge and consent of the data subject. Furthermore, data necessary to transmit data to users is collected and processed each time the Website is visited, including:

• IP Address.
• Browser type and version.
•Operating system.
• The web page accessed.
• Time of the server request.

The Ministry of Finance may conduct online surveys to collect specific data, including the data subject's opinions and comments about the website. The Ministry appreciates the responses of visitors to the website, as they help to improve the website. The visitor is completely free to provide data related to his name and other details, according to his preferences.

 
How does the Ministry of Finance collect personal data?

The Ministry of Finance collects personal data through various methods to facilitate its services and operations through the Ministry's website.
The methods of collecting this data are designed to ensure transparency and collect only the necessary data, and to comply with its functions in accordance with the Personal Data Protection Law in the Kingdom of Saudi Arabia.
The Ministry of Finance verifies the accuracy of the personal data provided through the website, and the minimum amount of personal data is collected to enable the benefit of the services provided by the Ministry.

How does the Ministry of Finance use personal data?
The Ministry of Finance uses the personal data collected to fulfill its regulatory obligations and ensure economic growth and financial stability. For example, we may use the data:
• To provide financial services and benefits.
• To manage and enforce financial laws and regulations, allocate budgets, and manage public funds.
• To store and archive documents handled by the Ministry.
The Ministry uses the data in a manner consistent with regulatory requirements and for purposes directly related to its responsibilities, ensuring that any use of personal data is necessary, relevant, and proportionate to its operational needs.

Under what circumstances is personal data disclosed?
The Ministry of Finance shall maintain the complete confidentiality and integrity of the personal data collected. Personal data is disclosed in accordance with applicable laws and regulations, and is limited to circumstances where it is legally required or necessary to fulfill its regulatory responsibilities. Such disclosures may occur in the context of cooperation with security or judicial authorities.

Furthermore, personal data may be shared with approved third parties or service providers who assist in providing the Ministry's services, under contractual agreements that ensure the protection of personal data.

In each case of disclosure, we take all reasonable steps to ensure that personal data is shared securely, and only to the extent necessary to achieve the specified purpose.

Regulatory basis for collecting and processing personal data

The Ministry of Finance shall collect and process personal data in accordance with the specified legal bases. According to the Personal Data Protection Law, the regulatory basis on which the Ministry relies in processing personal data includes:

A. Consent: The Ministry of Finance processes personal data based on the explicit consent of the individuals concerned, who have the right to withdraw such consent at any time without affecting the regularity of the processing that took place before the withdrawal. For further assistance, please contact the Data Protection Officer at the Ministry of Finance at the email: DPO@mof.gov.sa
B. Contractual Obligation: The Ministry of Finance processes personal data to fulfill its contractual obligations.
C. Public Interest: Personal data is processed to achieve objectives that serve the public interest.
D. Legitimate Interest: The Ministry of Finance may also process personal data based on legitimate interests, such as to:
a. Monitor website activity and ensure its security.
b. Collect user feedback to assess satisfaction and identify areas for improvement.

 

Where does the Ministry of Finance store and destroy personal data and how does it protect such data?

The Ministry of Finance ensures the secure storage of personal data through the National Center for Government Resource Systems (NCGR). Data is stored using advanced security measures – including encryption, access controls, and regular security audits – in order to protect against unauthorized access, loss, or destruction, and to ensure that personal data is handled in accordance with relevant personal data protection laws, regulations, and security standards. Personal data is retained only for as long as necessary to achieve its purpose and meet regulatory requirements. Personal data is destroyed so that it cannot be viewed, accessed, or retrieved without authorization – including operational, archived, and backup data – within five years in a secure manner in accordance with the Ministry's data retention and destruction policies.

Data Subject Rights Regarding Personal Data Processing
The Ministry of Finance exerts the necessary care and efforts to provide high-quality services to all personal data subjects in a manner that guarantees their rights stipulated in the Law, which are:

• The right to know: This includes your knowledge of the legal justifications and the regulatory basis or the actual need to collect your personal data. This privacy policy has been prepared to inform you and ensure that you are aware of all your rights, controls, and purposes for which your personal data is collected.

• The right to access your personal data: This includes reviewing and obtaining a copy thereof in a readable and clear format in line with the Ministry's powers to restrict access or set a specific period for exercising this right.

• The right to request the correction, completion, or update of your personal data with the Ministry, taking into account the controls of this right in the Law.

•The right to destroy your personal data: The data subject may request the Ministry to delete his personal data in accordance with the provisions of the Law. The Ministry shall take the appropriate decision after studying the request. If the request is rejected, the rejection shall be based on one of the following reasons, including:

• To comply with a legal obligation.

•To protect archival purposes to serve the public interest.

•To preserve personal data relevant to financial or legal claims.

•The right to withdraw consent for the processing of your personal data: The data subject may exercise this right in accordance with the provisions stipulated in the Law, and in a manner that does not conflict with the Ministry's regulations and laws, and does not hinder the implementation of the Ministry's procedures.

Except as stipulated by law, the data subject shall not be required to pay any fees for exercising these rights. In the event that a request is submitted to exercise one of these rights, the data subject shall be responded to within ten business days of receiving the complete request.

For more details on the processing of your personal data and how to exercise your rights, you can contact the Personal Data Protection Officer at the Ministry via the email: DPO@mof.gov.sa.

Cookies
Cookies are small text fields that are stored on your computer when you visit a website, to the extent that you consent to such storage. This enables the Ministry of Finance to remember your actions over a period of time. Cookies also enable the Ministry to identify your interests and preferences, learn more about them, and organize content in the same way.

How to submit a complaint or objection
As stipulated by the Law, and in a manner that would not conflict with the Ministry's laws and regulations, we welcome all requests, inquiries, questions, and complaints regarding the privacy policy, or the rights of data subjects, by contacting the Personal Data Protection Officer at the email: DPO@mof.gov.sa
Contact number
19990