Proposal
Project proposal & feasibility study
Justification, objectives, benefits, cost and initial risks
- Form no.
- SCA-PMO-F01
- Template edition
- 2.1
- Version
- V2
- Form date
- 2026-06-02
- Hijri
- 16 Dhuʻl-Hijjah 1447 AH
Auto-filled — Filled by the platform from the project record, not typed.
- Proposal no.
- DMD-2026-007
- Proposal
- Personal Data Protection Law compliance
- Portfolio
- Technology & Enterprise Systems Portfolio
- Sector
- Digital Transformation Sector
- Sponsor
- Eng. Majed S. Al-Rasheed
- Proposed by
- Eng. Yasser M. Al-Zahrani
1The proposalAuto-filled
- TitleAuto-filled
- Personal Data Protection Law compliance
- Proposed byAuto-filled
- Eng. Yasser M. Al-Zahrani
- DepartmentAuto-filled
- Cybersecurity Department
- Submitted onAuto-filled
- 2026-06-02
- Proposal numberAuto-filled
- DMD-2026-007
2Justification
The problem or need
The Personal Data Protection Law is in force, and the gap assessment found 37 controls not in place, including the record of processing and privacy notices for member contractors.
Today
No data protection officer is appointed, there is no record of processing, and 12 systems collect member contractors’ personal data unclassified.
3Objectives
- Full compliance with the Personal Data Protection Law and its regulations before the regulator’s audit in Q3 2027.
Strategic objectives served
- SO-4.1 — Strong technical capabilities
- SO-2.3 — Transparency and open sector information
4Expected benefits
| Kind | Benefit |
|---|---|
| Compliance | All 37 compliance gaps closed |
| Cost saving | Avoids fines of up to SAR 5M per violation |
5Cost & feasibilityAuto-filled
Estimated cost
SAR 4.6M
Net present value
SAR 4.4M
Return on investment
85%
Payback
2.3 years
| Year | Capex | Opex | Benefit |
|---|---|---|---|
| 2027 | SAR 3.1M | SAR 0 | SAR 0 |
| 2028 | SAR 1.5M | SAR 500K | SAR 2.2M |
| 2029 | SAR 0 | SAR 500K | SAR 2.6M |
| 2030 | SAR 0 | SAR 500K | SAR 2.8M |
| 2031 | SAR 0 | SAR 550K | SAR 2.8M |
| 2032 | SAR 0 | SAR 550K | SAR 2.9M |
6Initial risks
| Risk | Level | Proposed response |
|---|---|---|
| System owners resisting changes to data collection | Medium | A directive from the Secretary-General binding departments |
| Low user adoption of the new solution | Medium | A change plan and champions in each department |
Approval logChain: Proposal & feasibility approval · version 4
Every decision on the form — who, their role, the note and the time. It prints with the form.
| # | Step | Kind | Name | Decision | Note | Date & time |
|---|---|---|---|---|---|---|
| 1 | Author | — | Eng. Yasser M. Al-ZahraniDirector, Cybersecurity | Submitted | — | 2026-06-02 12:21 |
| 2 | Line manager endorsement | Technical acceptance | Eng. Reem K. Al-DosariThe requester’s line manager | Approved | — | 2026-06-04 14:35 |
| 3 | PMO review | Methodology review | Ghada A. Al-ShahraniPMO — analyst | Approved | — | 2026-06-07 09:42 |
| 4 | Portfolio manager review | Technical acceptance | Eng. Nayef H. Al-BuqamiPortfolio manager | Approved | — | 2026-06-09 10:49 |
| 5 | Cost & funding review | Financial approval | Approval engineFinance | Pre-breach alert | — | 2026-06-14 08:00 |
| 6 | Cost & funding review | Financial approval | Munirah A. Al-KhalidiFinance | Approved | — | 2026-06-15 14:05 |
| 7 | Project Approval Committee | Technical acceptance | Approval engineProject Approval Committee | Pre-breach alert | — | 2026-06-21 08:00 |
| 8 | Project Approval Committee | Technical acceptance | Dr. Noura M. Al-OtaibiProject Approval Committee | Approved | — | 2026-06-22 12:03 |
Signatures
Line manager endorsement
Eng. Reem K. Al-Dosari
Approved2026-06-04
PMO review
Ghada A. Al-Shahrani
Approved2026-06-07
Portfolio manager review
Eng. Nayef H. Al-Buqami
Approved2026-06-09
Cost & funding review
Munirah A. Al-Khalidi
Approved2026-06-15
Project Approval Committee
Dr. Noura M. Al-Otaibi
Approved2026-06-22