Skip to content

For businesses

Governance & compliance

Many of the breaches businesses face stem not from bad faith but from the absence of a written policy or a clear procedure. We work with management to build a governance framework suited to the size and activity of the business, and review its compliance with the Companies Law, the Labour Law, the Personal Data Protection Law and other applicable legislation.

First consultation free

Call or message us with a short account of what happened.

What we handle

  • Governance rules defining the powers of the board and managers
  • Delegation of authority matrices for financial and administrative decisions
  • Conflict of interest, code of conduct and whistleblowing policies
  • Personal Data Protection Law compliance reviews and privacy policies
  • Minutes of general assemblies and partners' and board resolutions
  • Reviewing internal work regulations and employment contracts against the Labour Law
  • Know-your-customer and anti-money laundering procedures for regulated activities
  • Periodic compliance reviews with a findings report and remediation plan

How we handle the file

We begin by collecting the existing documents: articles of association, resolutions, policies and template contracts, and hold short interviews with those responsible for management, HR and finance. We compare what actually happens in practice with the requirements of the relevant legislation, including the Companies Law of 1443H and the Personal Data Protection Law, and give management a gap report ranked by priority. We then draft the rules and policies needed in language that can be applied day to day, help have them adopted through the business's own procedures, and propose a schedule for periodic review as the legislation changes.

Common questions

Is governance only for listed companies, or for small businesses too?

The most detailed requirements apply to listed companies, but the Companies Law sets rules for every company on management, decision-making and directors' liability. Written rules and policies proportionate to the size of the business help organise the relationship between partners and reduce disputes.

Does the Personal Data Protection Law apply to my business?

Broadly, the law applies to the processing of personal data of individuals in the Kingdom, including customer and employee data. The extent of the obligations depends on the type of data and the scale and purpose of the processing, so we start by mapping what data the business collects and why.

How often should a business review its compliance?

There is no single interval that suits everyone. A review is worthwhile whenever there is a significant change in activity or ownership, or a relevant change in the law, alongside a periodic review agreed by management according to the size of the business.

General information only. The answer in your case depends on its facts and documents.

The first consultation is free

Tell us what happened, and we'll tell you where you stand