(2 / 1) - The National Information Center provides the technical linkage between the Shumoos system and other systems through the integration channel of the Ministry of Interior's systems, as well as with the private sector through a dedicated integration channel in accordance with the requirements of the Ministry of Interior and the data governance controls and technical structure, achieving full benefit with the highest speed and efficiency. The integration interfaces with government entities are available through the integration channel of the Ministry of Interior's systems, and the private establishments are accessible via the Shumoos integration channel with the private sector at the Ministry of Interior, which is linked to the integration channel of the Ministry of Interior's systems and cloud security systems and the Midan application.

(2 / 2) - The National Information Center provides all technical services to the beneficiary entities (government entities or private establishments) to facilitate the transfer and exchange of required information through the Shumoos system with the highest speed and efficiency after obtaining approval from the relevant authorities at the Ministry of Interior.

(2 / 3) - Public Security, in coordination with the Technical Affairs at the Ministry of Interior, is the entity responsible for contracting and supervising the operating entities of the system that provide technical services and technical support for the system, introducing them, and addressing the requirements of other security sectors in accordance with the technical structure requirements for the applications and systems of the Ministry of Interior.

(2 / 4) - Private establishments are required to provide the necessary environment for operating the Shumoos security system, such as (a site for using the system - human resources - communication network - computing devices - and others).

(2 / 5) - The Permanent Main Committee for Monitoring the Implementation of the Shumoos System, referred to in paragraph (4 / 1) of Article Four of this regulation, shall prepare a guiding manual for the procedures for controlling violations of the provisions of the system and its executive regulation, and the procedures for issuing penalties, notifications, and execution, whether in paper or electronic form through the digital transformation interfaces of the Ministry of Interior (Absher Midan, Absher Business, Absher Government) and continuously update them.

(2 / 6) - Reports of violations of the provisions of this system and its executive regulation are submitted through the approved reporting channels at the Ministry or police stations to take the necessary action regarding them.

(2 / 7) - The National Information Center, in coordination with the Technical Affairs at the Ministry of Interior, provides linkage services between the Shumoos security system and the government entities that issue licenses, to update the establishment's record in the system when the activity is canceled or ownership is transferred, so that the necessary action is taken in accordance with the requirements of the Ministry of Interior and the approved technical structure.

(2 / 8) - Anyone granted access rights to the system is considered responsible for using their specific privileges and bears legal responsibility for any misuse.

(2 / 9) - The National Information Center provides a special service for recording (reports, performance measurement, response speed for providing service to clients from the private sector or government entities) through the technical support call center around the clock.

(2 / 10) - Public Security, in coordination with the Technical Affairs at the Ministry of Interior, develops additional procedures on the digital transformation interfaces of the Ministry of Interior (Absher Midan, Absher Business, Absher Government), to register (permits and electronic approvals, violations, penalties, field visits), and electronic linkage as necessary between the integration channel of the Ministry of Interior's systems and the integration channel with the private sector in the Shumoos system and cloud security systems according to the technical structure.

(2 / 11) - The Technical Affairs at the Ministry, in cooperation with the National Information Center, prepares specifications for the technical equipment required to operate the system periodically, provided that the private sector supplies the required technical specifications.

(2 / 12) - No development or update of the Shumoos system shall take place except after the approval of the Permanent Main Committee for Monitoring the Implementation of the Shumoos System and in accordance with the requirements of the beneficiary security sectors, and through the central development team for cloud security systems at the Ministry of Interior.

(3 / 1) - The definitions of the activities mentioned in this article and the detailed activities that fall under these names as stated in other laws shall be taken into consideration.

(3 / 2) - The National Information Center shall complete all procedures automatically for the participation of each establishment that applies for participation in the Shumoos System within a period not exceeding two working days.

(3 / 3) - The relevant authorities in the regions shall facilitate all procedures for participation in the Shumoos System concerning them within a period not exceeding two working days.

(3 / 4) - Participation in the Shumoos System is considered a prerequisite for granting operating licenses or renewals for establishments subject to this law and its regulations, and they are not permitted to engage in the activity before that.

(3 / 5) - The data of all beneficiaries of the activity must be entered immediately into the Shumoos System without exception.

(3 / 6) - All data of beneficiaries of the activity in the Shumoos System shall be entered based on national identities, residence permits, and passports, with the data entry person bearing responsibility for that.

(3 / 7) - The Permanent Committee for the Development of the Shumoos Security System, as indicated in paragraph (4 / 1) of Article Four, shall determine the entered data and the outputs displayed to the establishments, in coordination with the National Information Center.

(3 / 8) - Establishments subject to the Shumoos System must link their computer systems for recording the data of beneficiaries of the activity in the system (via a special integration portal for the Shumoos System in its integration with the private sector), and its services will be available after being aggregated in the integration channel of the Ministry of Interior's systems.

(3 / 9) - Dealers in precious metals and gemstones shall register the data of their clients in buying and selling and record their data in accordance with what is stated in this law and its executive regulations, the laws related to electronic invoicing, and the precious metals and gemstones system, and apply the principle of "Know Your Customer" as stated in the Anti-Money Laundering Law and the Anti-Terrorism Financing Law.

(3 / 10) - Participation in the Shumoos System for practitioners of activities subject to the provisions of the law shall be based on the commercial register or identity in the absence of a register for individual activities, with the data of the client benefiting from the establishment recorded in the Shumoos System and obtaining an electronic commitment from them to bear responsibility towards their clients.

(3 / 11) - The National Information Center shall provide integration services on the integration channel of the Ministry of Interior's systems for the systems related to commercial activities to pass client data, for example, the "Tam" and "Ijar" systems within all establishments registered in both systems.

• The Ministry is responsible for operating the Shumoos system, supervising its implementation, developing it, and taking the necessary procedures to achieve that.

• (4 / 1) - His Excellency the Director of Public Security shall issue a decision to form a permanent main committee to follow up on the implementation of the Shumoos system, in accordance with the regulation of joint governmental committees and their organization issued by Civil Service Council Decision No. (1 / 1270) dated 21 / 11 / 1428 AH, approved by Royal Order No. (3759 / M B) dated 12 / 06 / 1432 AH. The aforementioned main committee shall be chaired by the Assistant Director of Public Security for Security Affairs and shall include the following entities:

  • First: Ministry of Interior:

    • 1- Ministry of Interior Agency for Security Affairs.

    • 2- General Administration for Legal Affairs and International Cooperation.

    • 3- Technical Affairs at the Ministry.

    • 4- Director of the General Administration for Investigations and Criminal Research in Security Affairs of Public Security.

    • 5- General Administration for Information Technology in Public Security.

    • 6- General Administration for Legal Affairs in Public Security.

    • 7- General Administration for Investigations and Criminal Research in Security Affairs of Public Security (Secretary of the Committee).

    • 8- General Directorate for Drug Control.

  • Second: Saudi Data and AI Authority:

    • National Information Center.

  • Third: Ministry of Commerce.

  • Fourth: Communications, Space, and Technology Authority.

  • Fifth: Zakat, Tax, and Customs Authority.

• (4 / 2) - The committee shall follow up and supervise the implementation of the system and its regulation, ensure compliance by the relevant entities, update the guiding evidence for the controls, procedures, and measures necessary for monitoring and verifying the application of the Shumoos automated system, and propose electronic verification means to be implemented by Technical Affairs in coordination with the Shumoos System Administration to inspect the extent of compliance of establishments, supervise the work of the special units for the regions, review their reports, and submit periodic reports to the Minister of Interior.

• (4 / 3) - The National Information Center, in cooperation with the training entities in Public Security, shall prepare continuous training programs to qualify and train specialists in the private sector, to familiarize them with the Shumoos system and the related instructions, and to qualify trainers who will train human resources in those sectors to deal with the system.

• (4 / 4) - The National Information Center, in coordination with Technical Affairs at the Ministry of Interior, shall be responsible for hosting the technical infrastructure of the system and providing management and operation tools to the entities responsible for technology at the Ministry of Interior, with Public Security at the Ministry of Interior undertaking the task of gathering the requirements for system development in coordination with the committee and considering the operational tasks mentioned in paragraph (2/12) of the regulation.

• (4 / 5) - The committee may request a representative from any entity it deems necessary to address any issue related to that entity regarding its application of the system and its regulation.

• (4 / 6) - The main committee referred to in paragraph (4 / 1) shall submit a comprehensive study in coordination with the relevant entities on the efficiency of spending and non-oil revenues at the Ministry, to transform the technical system project model (Shumoos) into a self-financing model and revenue-sharing with the private sector instead of the operational or capital model within two months from the date of the committee's formation.

• (4 / 7) - The main committee referred to in paragraph (4 / 1), in coordination with the Communications, Space, and Technology Authority, shall inventory the electronic applications of establishments that provide services electronically and are similar to the activities of establishments subject to the provisions of the system (such as the transformation of some transport companies or used goods to provide services through specific applications), study them within the committee, and propose the necessary integration operations with the Shumoos integration channel before granting them licenses, after coordinating with the Data Office at the Ministry of Interior.

• (4 / 8) - The main committee referred to in paragraph (4 / 1) shall inventory requests for electronic service provision by establishments subject to the provisions of the system (such as the transformation of some transport companies to provide services through specific applications), study them within the committee, and grant approvals regarding them before conducting technical integration operations between them and the Shumoos integration channel with the private sector, after coordinating with the Data Office at the Ministry of Interior.

(5 / 1) - The Ministry of Interior (Public Security), through the main committee referred to in paragraph (4 / 1), shall coordinate with the relevant government entities to grant licenses to private establishments engaged in activities under this law to electronically link procedures between the systems of those entities and the electronic system of Shumos in coordination with the Technical Affairs and the National Information Center.

(5 / 2) - The Technical Affairs of the Ministry shall coordinate with Public Security to prepare services and applications for government entities on the digital transformation interfaces of the Ministry of Interior, such as (Absher Government), to monitor the establishments licensed by it, which includes a special application for displaying shipments only, and to achieve the linkage for exchanging reports between the competent authority of Public Security and the government entities regarding establishments violating the provisions of the law and its regulations.

(5 / 3) - The National Information Center, in cooperation with the relevant authorities of Public Security, shall develop services in the Shumos security system for the relevant regional police authorities to inform government entities about establishments obligated to participate in the Shumos system that operate without a license, each within its jurisdiction.

(5 / 4) - The hosting environment for the Shumos database shall be on the secure cloud of the Ministry of Interior in accordance with the approved technical structure for cloud security systems.

(5 / 5) - The National Information Center, in coordination with the committee, shall prepare an automated form for private establishments, specifying the data required to be recorded.

(5 / 6) - The National Information Center, in coordination with the committee, shall provide the authority for monitoring and supervising the integration channel between the private sector and the relevant technical authority in the Ministry of Interior (Technical Affairs), along with providing the necessary technical tools, technical training, and required technical support.

(7 / 1) - The establishment is obligated to send the data of its clients to the Shumoos system within a maximum period of sixty minutes.

(9 / 1) - The violation and all its procedures shall be recorded until the issuance of the penalty decision, based on the commercial register number (Unified Number) of the establishment, except for individual activities as mentioned in paragraph (3 / 10) of Article Three of this regulation. If a commercial register is not available, the violation procedures shall be conducted based on the identity of the activity owner.

(10 / 1) - The Director of Public Security shall issue penalty decisions in writing or electronically for any violation of the provisions of the law and its regulations.

(11 / 1) - The National Information Center and the Shamoos System Administration shall take the necessary technical and procedural measures to ensure the privacy of private entities and the confidentiality of customer data.

(11 / 2) - The National Information Center, the Shamoos System Administration, and all entities responsible for implementing the provisions of the law shall take the necessary procedures to ensure that the data is not used for purposes other than those for which it was prepared.

(11 / 3) - Anyone who obtains information by virtue of their duties or during their work must maintain its confidentiality, and the use of such information for purposes other than those stipulated in the law and its regulations is prohibited.