Data:
A set of facts in their original form or in an unstructured format, such as numbers, letters, static images, videos, audio recordings, or emojis.
Personal Data:
Any data—regardless of its source or format—that can specifically identify an individual or make them identifiable, directly or indirectly, when combined with other data.
Public Information:
Data that has been processed—unprotected—that the university receives, produces, or handles, regardless of its source, form, or nature.
Protected Data:
Data classified as (strictly confidential, confidential, restricted).
Individual:
The person who submits a request for access to or obtaining public information.
Verification:
Ensuring the identity of any user, process, or device as an essential requirement for granting access to technical resources.
The purpose of the Information Freedom Policy is to regulate the access to or obtaining of public information in all its forms by beneficiaries. This policy aligns with the policies issued by the National Data Management Office—the legislative arm of the Saudi Data and Artificial Intelligence Authority (SDAIA). It aims to comply with data management and governance requirements, as well as related legislative and regulatory requirements. This is a legislative requirement in specification DG.1.2 of the National Data Management and Governance Regulations and Personal Data Protection Standards (version 1.5), issued by the National Data Management Office.
This policy applies to all requests by individuals to view or obtain public – unprotected – information produced by the university, whatever its source, form or nature. This includes paper records, e-mails, information stored on a computer, audio or video tapes, maps, photographs, manuscripts, handwritten documents, or any other form of recorded information. The provisions of this Policy do not apply to Protected Information:
1. Information whose disclosure is detrimental to the national security, policy, interests or rights of the kingdom.
2. Military and security information.
3. Information and documents obtained under an agreement with another country and classified as protected.
4.Inquiries, investigations, enforcement actions, searches, and surveillance related to a crime, violation, or threat.
5. Information that includes recommendations, proposals or consultations for the issuance of legislation or a government decision that has not yet been issued.
6. Information of a commercial, industrial, financial or economic nature the disclosure of which improperly results in profit or avoidance of loss.
7. Scientific or technical research, rights containing intellectual property, the disclosure of which leads to an infringement of a moral right.
8. Information related to competitions, tenders, and auctions, where disclosure would compromise fair competition.
9. Information that is confidential or personal under another regulation or requires specific legal procedures for access or acquisition.
Principle 1: Transparency
The individual has the right to know information related to the activities of the university in order to enhance the system of integrity, transparency and accountability.
Principle 2: Necessity and proportionality
Any restrictions on the request to see or have access to protected information received, produced or handled by the University must be justified in a clear and explicit manner.
Principle 3: Disclosure as the Default Rule
Every individual has the right to access public (non-protected) information. The requester does not need to have a specific status or particular interest in the information to obtain it, nor should they face any legal accountability related to this right.
Principle 4: Equality
All requests for access to or acquisition of public information are treated equally, without discrimination between individuals.
Firstly:
The right to access and obtain any non-protected information held by the university.
Second:
The right to know the reason for the denial of access to or acquisition of the requested information.
Third:
The right to appeal a decision denying access to or acquisition of the requested information.