Removing Personal Data from the Internet

What personal data can be requested for removal?

Personal data includes any information that identifies a person directly or indirectly, such as full name, national ID, address, contact details, images, and professional or financial information.

• National ID and passport numbers.
• Bank account and payment card numbers.
• Private contact details such as address and phone number.
• Medical and health information.
• Personal photos published without consent.

The regulatory framework in the Kingdom

The Personal Data Protection Law in the Kingdom of Saudi Arabia grants data subjects clear rights, including the right to access their data, the right to request correction, and the right to request destruction in specific cases.

Being aware of these rights gives the data subject a stronger position when dealing with entities that publish their information.

Where personal data typically appears

• News sites and older articles.
• Public databases and data aggregator sites.
• Forums and archived comments.
• Social media platforms and abandoned accounts.
• Google Search results linked to the name.

Steps to request removal

• Compile the links and sources containing the data.
• Contact the party responsible for the site or platform.
• Rely on the appropriate legal basis in the request.
• Request search engine de-indexing when needed.
• Perform periodic follow-up to ensure the data is not republished.

How to reduce future exposure of your data

Prevention is an essential part of data protection: adjust privacy settings on your accounts, review what is published about you regularly, and reduce sharing sensitive information on public platforms.

Delete.sa's role in protecting your data

Delete.sa helps identify the sources publishing your data, formulates requests based on the appropriate legal basis, and follows up on their removal from sites and search engines in an organized manner.