Case Study 01

AI Company in Riyadh

Size: 800

The Challenge

Government contracts require proof of PDPL compliance
Have ISO27001 but serious privacy gaps
Product development is complex
Subject to SAMA and other international standards
Require compliance to bid for SAR 60million contract in 3 months

The Solution

Train DPO in small chunks, but start program urgently
Build RoPA through interviews with business units
Identify relevant gaps and build compliance pack as this is urgent
Workshops with AI dev teams and nudge realistic changes
Program to build policies, procedures and cultural change
Roadmap and handover

Outcome

Feedback from the international team of PhDs that were developing AI products was that we spoke clearly and helped them manage risk without disrupting their work. The program’s success is that the client has succeeded in the first 3 rounds of bidding process and the PDPL compliance has been accepted.