Freedom of Information

Core Principles

Transparency
Every individual has the right to access information related to the activities of public entities, in support of transparency, integrity, and accountability.

Necessity and Proportionality
Any restrictions on requests to access protected information must be justified, clear, and explicit.

Disclosure as the Default
All individuals have the right to access non-protected public information without demonstrating specific interest or eligibility, and without legal consequences for exercising this right.

Equality
All requests to access or obtain public information must be treated equally and without discrimination.

Individual Rights Regarding Access to Public Information

First:

The right to access and obtain any non-protected information held by a public entity.

Second:

The right to be informed of the reasons for any denial of access to requested information.

Third:

The right to appeal any decision denying access to, or provision of, requested information.

Obligations of the Authority

1. Develop and implement policies and procedures governing access to public information, with approval from senior leadership.

2. Provide appropriate mechanisms (paper-based or electronic) for individuals to submit requests for access to public information.

3. Verify the identity of applicants before granting access, in accordance with guidelines issued by the National Cybersecurity Authority and relevant regulatory bodies.

4. Maintain complete records of all requests and decisions, and review them periodically to address misuse or non-responsiveness.

5. Establish and document retention and disposal policies for request records in line with applicable laws and regulations.

6. Notify applicants of any full or partial denial within 15 calendar days, stating the reasons and providing instructions for filing an appeal.

7. Implement awareness programs to promote transparency, in line with the approved Freedom of Information policies.

8. Monitor compliance with these policies regularly, report to senior leadership, and document corrective actions in cases of non-compliance.

How to Access or Request Information

Basic Requirements for Submitting a Request:

Requests must be submitted in writing, either electronically or on paper.
Requests must be submitted using the official public information request form approved by the Authority.
The request must specifically relate to access to or obtaining public information.
The form must include the applicant’s preferred method for receiving the decision and notifications (e.g., national address, email, official portal).
The completed form must be submitted directly to the Authority.

Main Steps for Request Handling:

First:
Submit the completed public information request form (electronic or paper) to the responsible department.

Second:
Within 30 days, the Authority shall take one of the following actions:

Approval:

Notify the applicant (in writing or electronically) of full or partial approval, and provide access to the information within 10 business days of fee payment (if applicable).

Rejection:

Notify the applicant of full or partial rejection, stating the reasons and the right to appeal.

Specify whether the rejection is full or partial.
Provide the reasons for rejection, where applicable.
Explain the applicant’s right to appeal and the appeal process.

Extension:

If the request cannot be fulfilled within the standard timeframe, the responsible department may extend the response period by a reasonable duration (for example, up to an additional 30 days) and provide the applicant with:

Notification of the extension and the expected completion date.
Reasons for the delay.
Information about the right to appeal the extension and how to exercise that right.

Notification:

If the requested information is already available on the Authority’s website or falls outside the Authority’s jurisdiction, the applicant shall be notified accordingly, including:

The type of notification (e.g., information already available online or outside the Authority’s jurisdiction).
Information about the right to appeal the notification and how to exercise that right.

General Rules on Freedom of Information

This policy applies to all individuals seeking access to non-protected public information produced by the Authority’s departments.
This policy does not apply to the following protected information:
Information that could harm national security, state policies, interests, or rights.
Military or security-related information.
Information obtained under agreements with other countries and classified as protected.
Investigation, inspection, monitoring, or enforcement records related to crimes, violations, or threats.
Recommendations, proposals, or consultations regarding laws or government decisions that have not yet been issued.
Commercial, industrial, financial, or economic information whose disclosure could result in unfair gain or prevent loss unlawfully.
Scientific or technical research, or intellectual property rights, where disclosure would prejudice moral rights.
Information related to tenders, bids, or auctions where disclosure would undermine fair competition.
Confidential or personal information protected by other laws or requiring specific legal procedures for access.

Last Updated: 03/05/2026 – 4:13 PM (Saudi Arabia Time)

Was this page helpful?

0% of users said Yes based on 0 comments