Article 7 of the Saudi Shomoos Security Law

This is the core article on establishments' obligations, and it contains four obligations:

1. Joining the Shomoos system.
2. Recording the information fully; recording only part of it is not enough.
3. Recording the information correctly.
4. Recording the information immediately from the start of dealing with the customer; recording may not be put off until later.

Under Article 1, the information is the customers' data that must be recorded and sent through Shomoos, and the customer is the natural person who benefits from the establishment's services. The obligation is addressed to the private establishment that carries out one of the activities the law applies to.

Note that the first obligation concerns joining itself, while the other three concern the quality and timing of the recording. An establishment may be a member and still be in violation if its recording is incomplete, incorrect or late. Article 8 follows, making the Ministry of Interior responsible for checking that establishments apply the law, detecting violations and applying penalties. Article 6 before it directs the Ministry to set a mechanism for checking membership before a license is issued or renewed.

Anyone who wants to organize their establishment's procedures to meet these obligations can consult a lawyer who specializes in administrative cases and commercial regulations.