Data sharing policy

The Scope:

The provisions of this policy apply to TVTC data sharing processes - with other government entities, private entities, or individuals - regardless of the source, form, or nature of this data.

This policy does not apply if the entity requesting the data is a government entity and the request is for security purposes or to fulfill judicial requirements.

This policy complies with the national data governance policies issued by the National Data Management Office in a manner that does not conflict with them and with the applicable regulations and the amendments issued in their regard.

Key principles of data sharing:

The Technical and Vocational Training Corporation (TVTC) relies on the following principles for data sharing:

Principle 1: Promote a Culture of Participation

TVTC shall share the main data it produces in order to achieve integration with other entities and adopts the principle of "one time" to obtain data from its reliable sources and limit its duplication, conflict, and multiplicity of sources. In the case of requesting data from a source other than its primary source, the consent of the main party - the source of the data – shall be obtained before sharing it with the requesting party.

Principle 2: Legality of Purpose

The data shall be shared for legitimate purposes based on a legal basis or a justified practical need aimed at achieving a public interest without harming national interests, activities of entities, privacy of individuals, or safety of the environment - with the exception of data and entities that are excluded by royal orders.

Principle 3: Authorized Access

All parties involved in the data sharing shall have the authority to view, obtain and use such data (which may require security scanning depending on the nature and sensitivity of the data), in addition to the knowledge, skill, and properly qualified and trained persons to handle the shared data.

Principle 4: Transparency

All parties involved in the data sharing processes shall make all the necessary information available for the data exchange, including: the required data, its purpose of collection, means of transferring, methods of storing, controls used for protection, and mechanism for disposal.

Principle 5: Joint Responsibility

All parties involved in the data sharing shall have a joint responsibility over the decisions on the data sharing and the data processing for their specific purposes. They also shall have a joint responsibility over ensuring the application of the security regulations as stipulated in the data sharing agreement, and the other related regulations, legislations, and policies.

Principle 6: Data Security

All parties involved in the data sharing shall apply the proper security regulations to protect and share the data in a safe and secure environment according to the related regulations and legislations, and according to the regulations issued by the National Cybersecurity Authority.

Principle 7: Ethical Use

All parties involved in the data sharing shall adhere to ethics during the data sharing process, to ensure using the data not only within the frame of data security policies or other related regulatory and legislative requirements, but also within the frame of justice, integrity, sincerity, and respect.

Steps and Procedures for Requesting Data Sharing from the Technical and Vocational Training Corporation (TVTC):

First: Filling the "data-sharing request form" and submitting the request to the data management office at TVTC.

Second: The submitted request form shall be processed within three months.

Third: The request shall be evaluated withing (30) days of receiving it, and the applicant shall be notified of the results.

Fourth: In the case of declining the request, the applicant may complete the requirement and request a re-evaluation. Then, the decision shall be issued within (14) days of receiving said request.