Basmah Alsubaie
CEO, Privacy Professionals
Richard Chudzynsky
Partner, KONEXO/Eversheds Sutherland
Tahir Latif
IAPP Country Leader, UAE, KSA & Qatar
#19 — Regulatory Enforcement Roundtable II: From Understanding Enforcement to Demonstrating Compliance
Since our first enforcement roundtable in May, the regulator has continued to issue decisions, and its most recent announcement penalized a familiar set of operational failures: marketing without consent, data subject requests not answered in time, breaches not reported within 72 hours, inadequate security measures, and the absence of an appointed DPO.
This second roundtable reconvenes the same panel, with the benefit of further decisions and direct engagements, to move from understanding how enforcement works to demonstrating compliance in practice. It examines what the latest decisions reveal about where regulators are focusing, how the process runs once an organization is notified and how little time it allows, and what regulators now expect as evidence that controls operate as described. It returns to the gaps that continue to leave organizations exposed, and to why readiness, an accurate record of processing, processes that meet the statutory deadlines, and a transparent posture toward the regulator, increasingly decides whether an inquiry is contained or escalates.