The provisions of these Rules apply to all entities subject to the provisions of the Personal Data Protection Law.

One committee (or more) shall be formed by a decision of the President of the Competent Authority, with a minimum of (three) members. The Committee shall consist of at least (three) members, one of whom shall be appointed as chairman, and among them shall be a technical specialist and a legal advisor. Each committee shall have one or more alternate members. Their remuneration and mechanism shall be determined in accordance with Appendix (1).

Membership shall be for a term of (three) years, renewable. A member shall continue in office after the expiration of their term until a replacement is appointed.

The President of the Competent Authority may reconstitute the Committee in any manner, whether by revoking membership, adding members, or otherwise, whenever the need arises.

In the event of a vacancy in the membership of any member for any reason, the President of the Competent Authority may appoint a replacement for a period equivalent to the remaining term of the predecessor in the Committee membership.

The Committees shall be organizationally linked to the President of the Competent Authority and shall operate independently.