Privacy Policy
Saudi Health Council
The Council assumes the responsibilities outlined in Article 17 of the Health System, issued by Royal Decree No. (M/11) dated 23/03/1423 AH, and Article (17-L) of its Executive Regulations, which stipulate that the Council is responsible for:
A. Developing a healthcare strategy for the Kingdom.
B. Establishing appropriate regulations for operating hospitals managed by the Ministry and other government entities to ensure they are managed according to principles of economic administration, performance standards, and quality benchmarks.
C. Formulating and approving policies for coordination and integration among all entities responsible for providing healthcare services, particularly in the following areas:
Primary, secondary, and specialized healthcare services.
Emergency and medical evacuation services.
Patient referrals between various healthcare entities.
Securing medications and medical supplies and ensuring their optimal use.
Education, training, and employment of healthcare workforce.
Conducting health research and studies.
Providing healthcare to pilgrims.
Promoting health awareness among the population.
Developing environmental health standards.
Exchanging expertise among healthcare professionals across different entities.
Additionally, Cabinet Decision No. 418 dated 29/10/1435 AH added the following responsibilities to the Council:
F. Evaluating and periodically reviewing health policies and plans.
G. Assessing healthcare service levels, determining the healthcare sector's requirements, and making recommendations for the distribution of healthcare services across the Kingdom's regions to enhance their quality.
H. Implementing the policies, plans, programs, and projects outlined in the Kingdom's healthcare strategy and addressing any challenges in coordination with relevant entities.
I. Coordinating among government entities providing healthcare services regarding the establishment of hospitals and specialized health programs and projects.
J. Studying healthcare service-related regulations and proposing their amendment and development.
K. Forming specialized committees to assist the Council in carrying out its tasks, whether at the Secretariat or regional levels, and defining their responsibilities, operational rules, and members’ rights and obligations.
L. Issuing the necessary organizational, administrative, and financial regulations to facilitate the Council's operations in agreement with the Ministry of Finance and approving the organizational structure of the Council’s Secretariat in coordination with the High Committee for Administrative Organization.
In acknowledgment of the importance of protecting the personal data privacy of users of the Saudi Health Council's website, and in compliance with the applicable laws and regulations in Saudi Arabia related to personal data protection, this policy has been developed to enable data owners to understand the nature and content of the personal data processed by the General Secretariat of the Saudi Health Council through its website. It explains the purpose of collecting personal data, how it is collected, the method of storage, processing mechanisms, destruction processes, the rights of data owners concerning their data, and how to exercise these rights.
This policy applies to all users and visitors (hereinafter referred to as "users" or "personal data owners") who have access to or use the Council's website.
Contact Information:
For general inquiries, you can contact the General Secretariat of the Saudi Health Council through the following details:
Entity Name
| Sauidi Health Council
|
Address
| QJHR+XQX, Al Olaya Street, Al Sahafa, Riyadh 13315
|
Phone
| 0114579300
|
Email
| Data@shc.gov.sa
|
Last Update Date:
We recommend periodically reviewing the privacy policy to stay informed about any updates. The last update to the privacy policy was made on December 16, 2024.
What Personal Data is Collected?
The General Secretariat of the Saudi Health Council ensures that the personal data collected and processed is limited to the minimum required to fulfill its duties and provide necessary services. Through its website, the General Secretariat collects the following personal data based on the service provided:
Personal Identity Data: Name, date of birth, national ID number, or residency number.
Contact Data: Phone number, email address.
Workplace Data: Organization name, position, department name.
Personal Account Data: Password used to access the beneficiary's page.
Cookie Data: Data collected via web logs and cookie technologies, such as your IP address, which links your device to the internet.
How is Your Personal Data Collected and Why?
Some personal data is obtained directly from you through registration forms to access specific services, including:
-
External Portal for Saudi Health Council Members: Allows members to access decisions, meetings, records, and update their data.
Employment Requests System: Manages and publishes job vacancies at the Saudi Health Council.
Employee Certification Verification System: Provides external entities with a service to verify employee certifications.
National Health Research and Studies Portal (NAHRSAB):
A portal designed to support and facilitate sustainable health studies and research, making decision-making more responsive to health challenges. It enables secure, organized access to raw research data for researchers and entities in accordance with ethical standards and intellectual property protection.
Data Sharing Requests: A service for external entities and individuals to request data from council departments.
Additionally, some personal data is indirectly collected through cookies, such as your IP address.
How is Your Personal Data Used?
The collected personal data is used, directly or indirectly, to provide services to beneficiaries.
How is Your Personal Data Disclosed?
Your personal data will not be disclosed to any third party.
Legal Basis for Collecting and Processing Your Personal Data
Under the Personal Data Protection Law, the legal basis for processing your data is your explicit consent through data registration. You can withdraw your consent at any time, provided it does not affect processing activities based on other legal grounds. To do so, contact us at:
Data@shc.gov.sa
How is Your Personal Data Stored?
Your personal data is securely stored at the General Secretariat of the Saudi Health Council or its approved servers within Saudi Arabia. The best security standards and practices are applied to ensure data protection, such as access control management, data classification and encryption, and regular security assessments.
The data is retained only for the duration necessary to meet the Secretariat's regulatory obligations and until the purpose of processing is fulfilled. Once this period ends, the data is securely destroyed, making it irretrievable, in accordance with Article 18 of the Personal Data Protection Law.
Your Rights Regarding Your Personal Data
Under the Personal Data Protection Law, you have the following rights:
Right to Information: To be informed about how your personal data is collected, the legal basis for its collection, and the processing mechanism.
Right to Access and Obtain Your Data: You can request access to your personal data and obtain a clear and readable copy whenever technically possible, in accordance with relevant regulations.
Right to Request Data Correction: You can request corrections to your data if it is inaccurate, incorrect, or incomplete.
Right to Request Data Deletion: You can request the deletion of your personal data once its purpose is fulfilled, unless there is a legal requirement to retain it as specified in Article 18 of the Personal Data Protection Law.
Right to Withdraw Consent: You may withdraw your consent to process your personal data unless there are legitimate purposes or legal grounds requiring otherwise.
To exercise any of these rights, contact us at
Data@shc.gov.sa, and we will respond within 30 days of receiving your complete request.
How to File a Complaint or Objection?
If you have concerns or believe we have not complied with the Personal Data Protection Law, you can file a complaint with the Personal Data Protection Officer:
Management
| Office of data Management
|
Phone
| 0114579300
|
Email
| Data@shc.gov.sa
|
If you are not satisfied with our handling of the complaint or if there is no response within 90 days, you can file a complaint with the relevant authority:
Entity Name
| Saudi Data and Artificial Intelligence Authority (SDAIA)
|
Website
| sdaia.gov.sa
|
National Data Governance Portal
| dgp.sdaia.gov.sa
|
