RSK-0047Chamber Channel & Podcast Studio — with a Media Sponsor
Privacy and copyright requirements for recorded content under the Personal Data Protection Law
A risk's detail, response, contingency and residual risk.
Risk statement
From cause to event to impact — with the preventive controls before the event and the contingency after it
Cause
Podcast and channel recordings hold guests’ images and personal data, and no policy yet sets how they are stored, for how long, and the publishing rights with the media sponsor
Preventive controls
- A privacy impact assessment of recorded content with the data office
- A signed consent form for every guest, raw recordings kept encrypted
- Retention period and publishing rights approved by the Executive Director of Corporate Communication
3 / 3
Event
Privacy and copyright requirements for recorded content under the Personal Data Protection Law
A finding from the personal-data regulator, or guests objecting to their recordings being published
Contingency
Stream live without keeping raw recordings for now, keeping only the approved published cut
Impact
Recording suspended in the new studio or the storage platform reworked, delaying the podcast’s first season
Assessment
The level before and after the response
Inherent
Residual
Exposure
SAR 45K
Residual
56% off the score
Score trend
Last six months
- Score
- Target residual
Escalation path
Escalation engine: a high risk unreviewed for 10 days notifies the PM, 15 the programme manager, 20 the PMO director
Last reviewed 10 days ago · Outside the engine — below «high»
Project manager
Current levelRami Al-Khatib
Currently followed up here- 2
Programme manager
Eng. Omar H. Bawazir
- 3
PMO director
Dr. Noura M. Al-Otaibi
- 4
Executive committee
Dr. Abdullah S. Al-Qahtani
By the PMO director’s decision
Mitigation plan
Each action with its owner and date — tick it off when complete
A privacy impact assessment of recorded content with the data office
Eng. Yasser M. Al-ZahraniEng. Yasser M. Al-ZahraniDirector, CybersecurityP-026y.alzahrani@chamber.saIn progressIn 23 days2026-11-2010 Jumada II 1448 AHA signed consent form for every guest, raw recordings kept encrypted
Eng. Omar H. BawazirEng. Omar H. BawazirDirector, IT InfrastructureP-024o.bawazir@chamber.saNot startedIn 48 days2026-12-156 Rajab 1448 AHRetention period and publishing rights approved by the Executive Director of Corporate Communication
Nawaf S. Al-AjmiNawaf S. Al-AjmiExecutive Director, Corporate Communication & MarketingP-050n.alajmi@chamber.saNot startedIn 74 days2027-01-102 Shaʻban 1448 AH
Trigger
A finding from the personal-data regulator, or guests objecting to their recordings being published
Contingency
Stream live without keeping raw recordings for now, keeping only the approved published cut