RSK-0047Remote Video Hearings Roll-out — Makkah Region
Privacy requirements for video-hearing recordings under the Personal Data Protection Law
A risk's detail, response, contingency and residual risk.
Risk statement
From cause to event to impact — with the preventive controls before the event and the contingency after it
Cause
Video-hearing recordings hold the parties’ personal data, and no policy yet sets how they are stored, for how long, and who may view them
Preventive controls
- A privacy impact assessment of video hearings with the data office
- Encrypt recordings and limit viewing to the circuit and the parties through Mueen
- Retention period approved by the Vice President for Judicial Affairs
3 / 3
Event
Privacy requirements for video-hearing recordings under the Personal Data Protection Law
A finding from the personal-data regulator, or a judicial circuit objecting to recording
Contingency
Run the rooms without keeping recordings for now, relying on the written hearing record
Impact
Recording suspended in the new rooms or the storage platform reworked, delaying 180 rooms in the Makkah region
Assessment
The level before and after the response
Inherent
Residual
Exposure
SAR 900K
Residual
56% off the score
Score trend
Last six months
- Score
- Target residual
Escalation path
Escalation engine: a high risk unreviewed for 10 days notifies the PM, 15 the programme manager, 20 the EPMO director
Last reviewed 10 days ago · Outside the engine — below «high»
Project manager
Current levelEng. Yasser M. Al-Zahrani
Currently followed up here- 2
Programme manager
Eng. Omar H. Bawazir
- 3
EPMO director
Dr. Noura M. Al-Otaibi
- 4
Executive committee
Dr. Abdullah S. Al-Qahtani
By the EPMO director’s decision
Mitigation plan
Each action with its owner and date — tick it off when complete
A privacy impact assessment of video hearings with the data office
Eng. Yasser M. Al-ZahraniEng. Yasser M. Al-ZahraniDirector, CybersecurityP-026y.alzahrani@bog.gov.saIn progressIn 23 days2026-11-2010 Jumada II 1448 AHEncrypt recordings and limit viewing to the circuit and the parties through Mueen
Eng. Omar H. BawazirEng. Omar H. BawazirDirector, IT InfrastructureP-024o.bawazir@bog.gov.saNot startedIn 48 days2026-12-156 Rajab 1448 AHRetention period approved by the Vice President for Judicial Affairs
Eng. Majed S. Al-RasheedEng. Majed S. Al-RasheedVice President, Judicial AffairsP-011m.alrasheed@bog.gov.saNot startedIn 74 days2027-01-102 Shaʻban 1448 AH
Trigger
A finding from the personal-data regulator, or a judicial circuit objecting to recording
Contingency
Run the rooms without keeping recordings for now, relying on the written hearing record