Privacy Notice

According to the Regulation of the general Authority for Statistics (GASTAT), Article Four stipulates that GASTAT is the entity responsible for statistics and the sole official reference for conducting, organizing, and technically supervising statistical work. To achieve its objectives, GASTAT is authorized to collect data and information covering all aspects of life in the Kingdom from various sources and to record and classify them, as well as to obtain data and information from the administrative records of public entities and private establishments and to classify, analyze, and derive their indicators. GASTAT is further mandated to independently produce, develop, and disseminate official statistics within the Kingdom.

Unified number: 199009
Fax: 00966114059493
Postal address
 P.O. Box: 3735
Riyadh : 11481
Kingdom of Saudi Arabia
Email address
info@stats.gov.sa
Working Hours
From 8:00 am. to 4:00 pm., Sunday to Thursday, excluding Fridays, Saturdays, and official public holidays.

Last update date
The Privacy Policy was last updated on 18 August 2025.
 

The personal information collected by GASTAT includes:

• Basic personal data (such as full name, national identification number, date of birth, etc.).
• Contact, address, and geolocation data (phone number, email address, home address... etc.).
• Economic data (such as individual income, sources of income, type of economic activity, etc.).
• Health and education data (such as educational qualification, chronic diseases, health status... etc.).
• Behavioral data (such as monthly spending rate, time usage patterns, average sleeping hours, etc.).
• Employment data (such as job title, sector type, company name, etc.).
• Personal demographic data (such as age, sex, nationality, etc.).
• Personal technical data (such as cookies).
• Other personal data directly related to the functions of GASTAT in the Kingdom, in a manner that serves its objectives.

Personal data is collected and obtained, either directly or indirectly, through various methods, including:
 1. Direct methods of collecting personal data, such as: 
A field visit to the household or establishment by GASTAT staff or its representatives. 
Contact by GASTAT staff via the statistical hotline (Unified Number: 199009).
Self-completion by individuals through GASTAT’s official website.
 2- Direct methods of collecting personal data, such as:
Obtaining personal data from other sources, including relevant governmental and private entities. 
Cookies collect data when using GASTAT’s website. 
 

Personal data is collected, processed, and stored for the purpose of carrying out statistical work, in accordance with Paragraph (3) of Article (4) of the Regulation of GASTAT, issued pursuant to Cabinet Resolution No. (11) dated 13/01/1437H and its subsequent amendments. The regulation stipulates that “the GASTAT is the entity responsible for statistics and the sole official reference for the implementation, technical supervision, and organization of statistical work. To achieve its objectives, it shall have the following powers…  Collecting data and information covering all aspects of life in the Kingdom from various sources and recording and classifying them; collecting data and information from the administrative records of public entities and private establishments, classifying and analyzing them, and deriving their indicators.”
The following are the main legal justifications for collecting personal data:

• The General Statistics Law of the State, established by Royal Decree No. 23 on 07/12/1379H  , and its subsequent amendments, serve as the primary legal basiss for the collection of personal data.
• Regulation of GASTAT (by Royal Decree No. 11 dated 13/01/1437H).
• Personal Data Protection Law (by Royal Decree No. M/19 dated 09/02/1443H) and its Implementing Regulations.
• The explicit or implicit consent of the personal data subject, or the legal guardian, in accordance with the provisions of the Personal Data Protection Law (PDPL).
• The law ensures the pursuit of public interest without violating the rights of personal data subjects.
• The personal data subject must fulfill their legal or regulatory obligations.
• Any obligation to which the personal data subject is a party must be fulfilled.
• This includes safeguarding vital interests and preventing serious harm.
• Protecting public health or national security.

Any of the powers stipulated in the Regulation of GASTAT

GASTAT collects and uses personal data for several purposes in compliance with the relevant laws and regulations, including but not limited to:

• Carrying out tasks related to statistical products, as well as all other services connected to GASTAT’s activities.
• Sending notifications, communications, and awareness materials to all stakeholders and beneficiaries 
• Managing, developing, and improving GASTAT services available to all beneficiary stakeholders.
• The team is also responsible for promptly addressing any requests, inquiries, or complaints that may arise.
• This is done for both research and analytical purposes. 
• Monitoring and detecting violations of the Terms of Use, as well as any actual or potential abuses related to the use of the website
• Enhancing the performance of the website and ensuring the security of its software, systems, and network.
• User identity authentication at the time of login.

GASTAT may process personal data for additional purposes beyond those for which it was originally collected, whenever necessary, in compliance with the provisions of the Personal Data Protection Law (PDPL) and its Implementing Regulations.

GASTAT is committed to safeguarding the privacy and confidentiality of individuals’ data. It undertakes not to disclose any personal data collected for statistical purposes, whether directly or indirectly, and not to share such data with any entity or third party, except in narrowly defined cases as determined by the relevant laws and regulations. Pursuant to the provisions of the General Statistics Law of the State, issued by Royal Decree No. (23) dated 07/12/1379H,  that affirms the confidentiality of individual data and restricts its use strictly to statistical purposes, any other use—such as disclosure, reporting, or exchange with other entities—is expressly prohibited.
However, the Personal Data Protection Law (PDPL), issued by Royal Decree No. M/19 dated 09/02/1443H (corresponding to 16 September 2021), permits specific exceptions in which personal data may be disclosed, including the following cases:
-    If the data has been collected from publicly available sources,
-    If the disclosure request is made for security purposes, the enforcement of another regulation, or compliance with judicial requirements.
-    If disclosure is necessary to protect public health and safety, or the life or health of specific individuals.
-    That disclosure be limited to the processing of subsequent personal data which does not lead to the identification of the data subject or any other individual in particular.
-    If disclosure is necessary to achieve the legitimate interests of the General Authority for Statistics.

GASTAT is the sole official reference for conducting statistical work, as its technical supervisor and regulator. It is authorized to collect the data and information it requires—covering all aspects of life in the Kingdom of Saudi Arabia—from both public and private entities and to classify, analyze, document, preserve, and derive indicators from such data. This mandate is established under the General Statistics Law of the State, issued by Royal Decree No. (23) dated 07/12/1379 AH, and the Regulation of GASTAT, issued by Council of Ministers Resolution No. (11) dated 13/01/1437 AH, together with its subsequent amendments.

GASTAT is committed to taking all necessary measures and precautions to securely safeguard the personal data in its possession, ensuring its protection against loss, unauthorized access, misuse, unauthorized alteration, or disclosure.
GASTAT retains your personal data for the period necessary to achieve the purposes specified in the Privacy Notice. Once these purposes have been fulfilled, the data will be securely destroyed in a manner that prevents any further access or recovery.

The Personal Data Protection Law (PDPL), created by Royal Decree No. (M/19) on 09/02/1443 AH, protects the rights of people whose personal data is collected and used, focusing on why that data is gathered and handled. GASTAT has made available the “Personal Data Subject Rights” service, through which individuals may submit requests via GASTAT’s official portal. Such requests will be received and processed—free of charge—within a period not exceeding thirty (30) days. The following are the types of rights available to personal data subjects:
-    Right to be Informed: This right involves informing the personal data subject about the legal basis for collecting their personal data and the purpose of that collection.
-    Right of access to your personal data: Without prejudice to the provisions of the Law, the personal data subject may request access to their personal data held by GASTAT, in accordance with regulatory requirements.
-    Right to request a copy of personal data: The personal data subject can ask for a copy of their personal data that GASTAT has, following the rules set by the Law.
-    Right to request correction of personal data: According to the Law, you can ask GASTAT to update, fix, or complete your personal data they have, following the rules that apply.
It should be noted that some of these rights are not absolute but depend on the primary purpose and the legal basis previously mentioned, whereas all other rights are deemed absolute. You may contact the Personal Data Protection Officer at GASTAT via the following email address for more details regarding the processing of your personal data and how to exercise your rights:
DPO@stats.gov.sa

Title:
Kingdom of Saudi Arabia- Riyadh
Phone number: 
Customer Service
199009
Email: 
DPO@stats.gov.sa
How to submit a complaint or objection?
If you have any remarks regarding non-compliance with the Personal Data Protection Policy issued by the National Data Management Office, you may contact us through the communication channels listed below:
E-Portal Team of GASTAT
Phone Number:
199009
Email:
 info@stats.gov.sa 
If you are not satisfied with the processing of your request, or in the event that your inquiry is not addressed within three (3) business days, you may submit a complaint to the Data Management Office at the General Authority for Statistics via the following email address:
DPO@stats.gov.sa
You may also submit a complaint to the regulatory authority, represented by the Saudi Data & AI Authority (SDAIA), if you are dissatisfied with the manner in which your personal data has been used, or if your complaint has not been addressed by the Data Management Office at GASTAT.
Saudi Data & AI Authority (SDAIA).
National Data Management Office
Kingdom of Saudi Arabia-Riyadh
Website:
https://sdaia.gov.sa/
National Data Governance Platform:
  https://dgp.sdaia.gov.sa/