Privacy Notice
The Ministry of Education places the protection of personal data among its main priorities, and is committed to implementing the Personal Data Protection System issued by Royal Decree No. (M/19) dated 09/02/1443 AH, and amended by Royal Decree No. (M/148) dated 05/09/1444 AH and its regulations.
It is important that the beneficiary is aware of what data the Ministry of Education collects, the purpose of collecting and processing it, and how it is used in accordance with the personal data protection system and its regulations in force in the Kingdom. Based on this principle, the privacy notice was drafted.
The Ministry of Education urges the beneficiary of its services to constantly review the privacy notice to know any updates made to it.
Your visit to the Ministry of Education website and your use of its affiliated platforms means that you read and agree to what is stated in this privacy notice and any updates made to it. This excludes the processing of personal data in cases where the personal data protection system stipulates that it is not subject to approval.
First: What Personal data is collected?
The Ministry of Education collects only the minimum personal data from beneficiaries that is necessary to achieve its intended purposes and comply with the personal data protection system and regulations in the Kingdom of Saudi Arabia. Personal data encompasses the following categories:
Basic personal data: includes categories such as name, gender, and marital status, personal photographs, facial recognition data, voiceprints, and fingerprints.
Contact data: This includes data such as phone numbers, email addresses, and personal addresses.
Account data: includes login data for accounts on platforms and applications affiliated with the Ministry of Education, such as usernames and passwords.
Education and training data: include data on the life cycle of the educational and training process related to various stakeholders such as the student, teacher, parent, and school principal.
Location data: When registering for some systems that require verifying the user's location and ensuring the validity of the login and logout process.
Financial data: includes data collected for the purposes of making payments, such as the account number.
Health data: includes every personal statement related to an individual’s health condition, whether physical, mental, or psychological.
Second: Why do we collect your data, and how do we collect it?
The Ministry of Education is committed to collecting and processing your personal data in accordance with what is stipulated in the Personal Data Protection System and its regulations. Collecting and processing your personal data is considered necessary to provide the highest level of service. Your personal data is collected directly or indirectly depending on the service provided to you, and the methods of collecting personal data include the following methods:
Direct methods:
- Services: When registering in the official channels of the Ministry of Education, which include educational platforms, mobile applications, or various products or services.
- Communication: When communicating with the Ministry of Education through communication channels.
- Opinion polls.
- Paper and electronic registration forms.
Indirect methods:
- Data provided to us by other entities, such as government and private entities that support or provide services to the segment of beneficiaries of the Ministry of Education’s services.
- Data that is recorded once you visit the Ministry of Education’s website or the Ministry’s electronic platforms.
Third: How do we use your data?
The Ministry of Education is constantly improving the performance of its services provided to beneficiaries by collecting and processing data for the following purposes:
1. Empowering and providing the Ministry of Education’s services and meeting its requirements.
2. Preparing studies that serve the educational process.
3. Responding to inquiries from beneficiaries of the Ministry’s services.
4. Develop and improve the beneficiary experience and ensure continuity of service provision with the required quality.
5. Authenticating the user's identity when registering for the Ministry's various services.
In accordance with the Data Sharing Policy established by Ministerial Resolution No. (1/4600710188/S) dated 05/08/1446 AH, we may share your necessary personal data with governmental or non-governmental entities for specific purposes.
This sharing is based on regulatory requirements or justified practical needs that aim to serve the public interest while ensuring that national interests and individual privacy are protected. We obligate entities receiving this data to adhere to confidentiality standards and maintain a level of protection comparable to the Ministry of Education. The use of this data for any other purposes is strictly prohibited.
When we share your personal data, we do so in a secure and reliable environment, in compliance with the Personal Data Protection Law and its associated regulations. Furthermore, the Ministry of Education has implemented additional measures to protect your personal data by establishing data-sharing agreements with other entities. Specific terms and conditions govern these agreements, aligning with the principles of data sharing and exchange.
Fifth: The regulatory basis for collecting and processing personal data.
We collect and process your data based on the following statutory bases:
1. The legal obligation represented in:
First: The Ministry is committed to fulfilling its duties and responsibilities regarding the provision of public education and compulsory basic education in the Kingdom. This commitment is in accordance with Article 30 of the Basic Law of Governance, issued by Royal Order No. (A/90) on 27/08/1412 AH. It also aligns with the Kingdom's education policy, approved by Cabinet Resolution No. 779 on 16/09/1389 AH and Cabinet Resolution No. (139) dated 26/04/1425 AH, mandating that public education be compulsory for individuals aged six to fifteen.
Second: The Ministry adheres to the Personal Data Protection Law, established by Royal Decree No. (M/19) on 09/02/1443 AH and later amended by Royal Decree No. (M/148) on 05/09/1444 AH.
2. Public interest: Enhance the educational process to attain the highest standards of quality education and improve educational outcomes.
Sixth: How do we store your data?
Your personal data will be stored securely in the data center at the Ministry’s headquarters, and destroyed in a secure manner that cannot be accessed after the purpose of collecting it has ended. The Ministry may also retain that data after collecting it has ended if everything that leads to specifically identifying its owner has been removed.
Seventh: Transferring Personal Data Outside the Kingdom's Geographical Borders
In accordance with the general rules established by the National Data Management Office regarding the transfer of personal data outside the Kingdom's geographical boundaries, your personal data will be securely stored and processed within the Kingdom of Saudi Arabia. This measure is designed to uphold national digital sovereignty over the data. However, this provision does not apply to the exceptions outlined in Article Twenty-Nine of the Personal Data Protection Law and its regulations, which allow for the transfer or processing of data beyond the Kingdom's borders.
Eighth: The rights of the beneficiary
First: The right to be informed, which encompasses understanding the legal justification for the collection of personal data and the specific purposes for which it is being collected.
Second: The right to request access to personal data held by the Ministry of Education, ensuring that it is provided in a clear and legible format, in accordance with the Personal Data Protection Law and its regulations.
Third: The right to request the correction, completion, or updating of personal data held by the Ministry of Education.
Fourth: The right to object to and withdraw consent for the processing of personal data at any time, unless legitimate purposes require otherwise.
Fifth: The right to access personal data held by the Ministry of Education in accordance with the Personal Data Protection Law and its regulations, without prejudice to the provisions of Article 9 of the Personal Data Protection Law.
Do you have a question about our privacy notice?
If you have any inquiry or request regarding your rights to processing your personal data or what is stated in this Privacy Notice, you can contact the Data Management Office at the Ministry of Education.
Contact information:
Department/relevant team: Ministry of Education - Data Management Office
Address: Kingdom of Saudi Arabia - Riyadh, Salah Al-Din District, King Abdullah Road, building number (3425), postal code (12435), additional number (8234)
Tel: 0114753000
Email: DMO@moe.gov.sa