HomeReady-to-use templates and contractsIP and dataData Sharing Agreement
Data Sharing Agreement Template: A Ready Contract Certified by a Licensed Saudi Lawyer
- Category
- IP and data
- Language
- Arabic + English
- Format
- Editable DOCX
CERTIFICATION RECORD
This template was prepared and reviewed by a licensed Saudi lawyer and is kept current as the Kingdom's regulations change.
Where an Arabic and an English text exist, the Arabic text prevails
An agreement between two parties exchanging personal data, each responsible for its own processing, bilingual.
A data sharing agreement covers a different situation from a processing agreement: here neither party works on the other's behalf, two parties exchange personal data and each uses its share for its own purposes. This happens between partners in a loyalty programme, between a business and a broker who refers customers to it, or between two companies that combine to serve the same client. Without a written agreement the most important question goes unanswered: who replies to a data subject who asks for a copy or a deletion, and who tells the other side when an incident occurs. Sighaty template I-05 is written on the concepts of the Personal Data Protection Law and covers the purpose and limits of the sharing, each party's responsibility for its own processing, the routing of requests, notification, and how sharing ends, in two parallel languages with the Arabic text prevailing on any difference.
Get the Data Sharing Agreement TemplateI-05What this agreement is and when you need it
What decides which template you need is who sets the purpose. If the other party only follows your instructions, you are in processing agreement territory, template I-04, and if it uses the data for its own purposes, you are sharing, and this is the right template. You need it before the first exchange rather than after, because the first file sent by email with no agreed framework is hard to pull back later.
- A loyalty programme or joint offer where two brands exchange subscriber data.
- A customer referral arrangement between a business and a broker or commercial partner.
- A service integration where two companies serve the same client through connected systems.
What the smart-fill asks and what you receive
The smart-fill asks for party one and party two in Arabic and English with each one's commercial registration, then for the window within which a party forwards a misdirected data subject request to the party it concerns, the window within which each notifies the other of an incident, the notice period on which either party may end the sharing with deletion or anonymisation of the data, and the forum for disputes between the competent court and arbitration at the Saudi Center for Commercial Arbitration.
Within minutes you receive a formatted bilingual Word document, ready to sign and editable before approval. The result is a short document that the operations teams on both sides can actually follow, telling each employee what to do when a request arrives from someone who is not their customer, and when a leak is found in a shared file.
Why a lawyer-certified template beats a free download
Free forms in this area confuse sharing with processing, casting the two sides as controller and processor and then imposing obligations on one of them that do not match its real role, so both sign text that does not describe their situation. A template certified by a licensed Saudi lawyer starts from the correct characterisation of the relationship and builds on it, without loading the agreement with clauses copied from foreign frameworks, and it is updated as data protection requirements in the Kingdom develop.
Frequently asked questions
What is the difference between a data sharing agreement and a data processing agreement?
In processing, one party acts on behalf of the other and on its instructions, while in sharing each party uses the data for its own purpose and answers for its own processing. The two templates are structured differently for that reason, so using one in place of the other creates obligations in the wrong place. If the relationship is mixed, both can be signed to cover each side cleanly.
Who answers a data subject if the request reaches the wrong party?
The template provides that each party handles the requests relating to its own processing and forwards a misdirected one to the party it concerns within the window you set at fill-in. That clause alone prevents the delays that arise when each side assumes the other is replying. To handle the request itself, use the DSR Response Pack I-06.
What happens to the exchanged data when the sharing ends?
Either party may end the sharing on the agreed prior notice, and then deletes the exchanged data or anonymises it so it is no longer linked to identified people. Fixing this in advance spares you a late negotiation with a partner whose relationship has ended while your customers' data still sits in its systems.
The content is general guidance, not legal advice; consult a licensed lawyer for your specific case.