Virus outbreak puts focus on online privacy, data protection

Following the outbreak of the coronavirus disease (COVID-19) pandemic, the Saudi Ministry of Education chalked out a plan to ensure continuity of learning using digital platforms.

At the beginning of the new academic term late in August, the ministry decided to continue with distant learning and to assess the situation after seven weeks. Last week, the authorities announced their intention to continue with the digital option for the rest of the academic year to ensure students’ well-being.

The ongoing world health crisis has not only exposed the vulnerabilities of the global health care system, but it has also highlighted the importance of digital technology.

It is not just educational institutions that are relying on technology; governments and businesses are also taking full advantage of digital platforms. Technology has come to the rescue in these extraordinary circumstances.

The increased dependence on information technology has been accompanied by the emergence of new companies offering cutting-edge technological solutions. The situation calls for a strong legal framework for intellectual property rights in the Kingdom.

The existing laws usually deal with service providers in most cases. But what about users, and are their rights guaranteed by international laws?

I am referring to privacy laws and controls. There is a need to protect users’ data while they browse the internet and use digital platforms.

Saudi laws and regulations do not elaborate on data privacy, such as the communication law and postal law. However, data privacy is reviewed in more detail in e-commerce law.

The law defines personal data as any statement, whatever its source or form, that leads to knowing an individual specifically, or make it possible to identify them directly or indirectly, including name, personal identification number, addresses, and contact numbers, license numbers, records, personal property details, bank account numbers, credit cards, and photos of the individual, and other information of a personal nature.

The law also obligates service providers of various specialties to protect users’ data by clearly defining their privacy policy to safeguard this data.

Since reliance on technology is increasing in every sphere of life, it has become imperative to ensure data privacy and to formulate laws to protect people from online fraud and other threats.

It should not be limited to e-commerce, as the scope of technology is wide. There is a need for an independent authority to deal with this aspect of technology.

The authorities should also clearly define the concept of privacy and create awareness about this important issue through direct and indirect campaigns to effectively combat information crimes and other malpractices rampant in the digital world.

• Dimah Talal Alsharif is a Saudi lawyer and legal consultant. Twitter: @dimah_alsharif