Information Policy

Definitions

For the purposes of applying this policy, the words and terms listed below shall have the meanings specified next to each, wherever they appear in this document, unless the context requires otherwise:

Data	A collection of facts in their raw form or in an unorganized form, such as numbers, letters, still images, videos, audio recordings, or emoticons.
Individual	The person submitting a request to view or obtain public information.
Verification	Ensuring the identity of any user, process, or device as a fundamental requirement to allow access to technical resources.
Public Information	Processed – non-protected – data that is received, produced, or handled by public entities, regardless of its source, form, or nature.
Applicant	Any entity from the public or private sector, the third sector, or any individual who submits a request for data sharing.
Regulatory Authority	Any governmental entity or independent public legal entity responsible for regulatory or supervisory duties for a specific sector in the Kingdom of Saudi Arabia based on a legal framework.

Scope

This policy aims to enable individuals to access or obtain public – non-protected – information, regardless of its source, form, or nature. This includes paper records, emails, computer-stored information, audio or video tapes, maps, photographs, manuscripts, handwritten documents, or any other recorded form of information.

The provisions of this policy do not apply to protected information, which includes:

Information whose disclosure may harm the national security, policies, interests, or rights of the state.
Military and security information.
Information and documents obtained under an agreement with another country and classified as protected.
Investigations, inspections, monitoring activities, and law enforcement operations related to a crime, violation, or threat.
Information that contains recommendations, proposals, or consultations for issuing a legislation or government decision that has not yet been enacted.
Commercial, industrial, financial, or economic information whose disclosure may lead to unlawful profit or loss prevention.
Scientific or technical research or intellectual property rights whose disclosure may affect moral rights.
Competition, bids, and auctions information, where disclosure could compromise fair competition.
Information that is classified as confidential or personal under another regulation or requires specific legal procedures to be accessed or obtained.

Key Principles of Freedom of Information

The first principle: Transparency
Individuals have the right to access information related to the activities of the General Secretariat as a government entity, in order to enhance integrity, transparency, and accountability.
The second principle: Necessity and Proportionality
Any restrictions on the request to view or obtain protected information that the General Secretariat receives, produces, or handles must be justified in a clear and explicit manner.
The third principle: Public Information Should Be Disclosed
Every individual has the right to access public information - that is not protected - and the applicant does not necessarily need to have a specific capacity or interest in this information to be able to obtain it, nor are they subject to any legal accountability related to this right.
The fourth principle: Equality
All requests to view or obtain public information are treated on the basis of equality and non-discrimination between individuals.

Individuals' Rights Regarding Accessing or Obtaining Public Information

First: The right to view and obtain any unprotected information.
Second: The right to know the reason for refusing to view or obtain the requested information.
Third: The right to appeal the decision to refuse the request to view and obtain the requested information.

Key Steps to View or Obtain Information

Key Requirements for Requests to Access or Obtain Public Information:

The request must be in writing or electronic.
The "Public Information Request Form" must be completed.
The request must be for the purposes of accessing or obtaining public information.
The request form must include details on how the final decision and notifications should be sent to the individual (national address, email, website, etc.).

Key Steps to Request to View or Obtain Public Information:

First: Requests are submitted by completing a "Public Information Request Form" - electronically or in paper form.

Second: The Data Management Office, within a period not exceeding (30 days) of receiving the request to view or obtain public information, takes one of the following decisions:

Approval: If the request to access or obtain information is approved in whole or in part, the individual must be notified in writing or electronically of the applicable fees, and this information must be made available to the individual within a period not exceeding (10) business days from receiving the payment.
Rejection: If the request to access or obtain information is rejected, the rejection must be in writing or electronic form and must include the following information:
- Specify whether the request was rejected in whole or in part.
- Reasons for rejection, if possible.
- The right to appeal this rejection and how to exercise this right.
Extension: If it is not possible to process the information access request in a timely manner, the response period should be extended by a reasonable period depending on the size and nature of the information requested - not exceeding (30) additional days - and the individual should be provided with the following information:
- Notification of the extension and the expected date of completion of the request.
- Reasons for the delay.
- The right to appeal this extension and how to exercise this right.
Notification: If the requested information is available on the official website, or is not within the competence of the General Secretariat, the individual must be notified of this in writing or electronically, and the notification must include the following information:
- Type of notification (the requested data is available on the official website, or is not within the competence of the General Secretariat).
- The right to appeal this notification and how to exercise this right.

Third: If the individual wishes to appeal the rejection of the request, they can submit a written or electronic notice of appeal within a period not exceeding (15) business days from receiving the decision. The Data Governance Committee reviews the request, makes the appropriate decision, and notifies the individual of the review fees - which are refunded if the committee approves the request - and the appeal decision.