Through the newly introduced rules on the appointment of Data Protection Officers, SDAIA has concretized one of the central governance mechanisms of the PDPL. The requirements closely follow international standards, especially those of the EU GDPR, while adapting them to the specific needs of the Saudi regulatory environment.