Information Access Policy

This Policy applies to:

• All public information produced, maintained, or managed by the Entrustment and Liquidation Center.
• All approved channels for publishing and providing information.
• Requests for information submitted by beneficiaries or relevant stakeholders.
• Promoting transparency and access to public information.
• Enabling beneficiaries to obtain information in accordance with the approved controls.
• Enhancing the reliability and accuracy of published information.
• Regulating the process for requesting and handling information.
• Strengthening governance.
• Protecting restricted information and personal data in accordance with the applicable regulations.

The Center shall adhere to the following principles when implementing this Policy:

1. Transparency: Making public information available in a clear, accurate, and up-to-date manner through approved channels.
2. Fairness: Enabling all beneficiaries to access information on an equal basis in accordance with the approved controls.
3. Reliability: Ensuring the accuracy, timeliness, and periodic review of published information.
4. Information Protection: Protecting restricted or confidential information and personal data from unauthorized disclosure.
5. Accountability: Defining the responsibilities associated with the management, publication, and provision of information.

The Center shall adhere to the following:

• Making public information available through approved official channels.
• Enabling beneficiaries to submit requests for access to information through approved channels.
• Processing information access requests within the specified timeframes in accordance with approved procedures.
• Providing the reasons for rejecting a request, if any, in a manner that does not conflict with the applicable laws, regulations, and instructions.
• Periodically updating published information to ensure its accuracy and reliability.
• Confidential or restricted information shall be identified in accordance with national regulations and shall not be published or shared.
• Information shall not be used in a manner that violates applicable regulations or the purposes for which it was provided.

Public, confidential, or restricted information shall be identified and classified in accordance with national regulations and approved regulatory controls.

1. Beneficiaries have the right to submit a request for access to information by contacting data@infath.gov.sa. The request must include, at a minimum, the following:

1. Applicant information.
2. A description of the requested information.
3. Contact details.

2. The Center shall receive requests to access or obtain public information and take one of the following actions:

1. Approval: If the request to access or obtain information is approved, either fully or partially.

2. Rejection: If the request to access or obtain information is rejected, the rejection must be communicated in writing or electronically and include the following information:**

• Whether the request has been rejected in whole or in part.
• Reasons for the rejection, where applicable.
• The right to appeal the rejection and how to exercise that right.
• Notice of extension and the expected date for completion of the request.
• Reasons for the delay.
• The right to appeal the extension and how to exercise that right.

3. Notification: If the requested information is available on the Center’s website or falls outside the Center’s jurisdiction, the individual must be notified in writing or electronically, and the notification shall include the following information:**

• The type of notification; for example, that the requested information is available on the Center’s website or does not fall within its jurisdiction.
• The right to appeal the notification and how to exercise that right.

The Center shall, to the extent possible, proactively publish public information relevant to beneficiaries through approved official channels, in a manner that promotes transparency and enhances access to information.

1. The Center grants access to information in accordance with approved authorization levels.
2. Information must be used solely for official purposes.
3. Confidential information may not be copied or shared without official authorization.
4. Information shall be provided in accessible formats for all users.
5. All users must maintain the confidentiality of their access credentials.
6. Personal data shall not be disclosed except on a lawful basis, with the explicit consent of the data subject, or in accordance with the exceptions stipulated in the Personal Data Protection Law and other applicable regulations.

• The Center provides all its digital services through its official website or approved channels.
• The Center is committed to improving the accessibility of digital services for all categories of beneficiaries.
• The Center applies best practices related to usability, beneficiary experience, and digital accessibility.
• Beneficiaries are able to track the status of their requests and view the outcomes of the services provided.
• Digital services are designed in accordance with best practices to ensure ease of use and accessibility.
• The Center is committed to periodically updating its digital services based on user experience evaluations.