This is an earlier version ofImplementing Regulation of the Law on Electronic Transfer of Customer Information with Establishments to the National Information Center at the Ministry of Interior (Shamous Security System) - 1436Switch to the new version

Implementing Regulation of the Law on Electronic Transfer of Customer Information with Establishments to the National Information Center at the Ministry of Interior (Shamous Security System) - 1436

(1/2)- The National Information Center provides the technical linkage between the Shumoos System and other systems to achieve full benefit with the highest speed and efficiency.
(2/2)- The National Information Center offers all technical services to the beneficiary entities (government entities or private establishments) to facilitate the transfer and exchange of required information through the Shumoos System with the highest speed and efficiency.
(3/2)- The National Information Center is considered the responsible entity for contracting and supervising the operating entities of the system that provide technical services and technical support for the system and for introducing them.
(4/2)- Private establishments are required to provide the necessary environment for operating the Shumoos System within the establishments, such as (location, human resources, communication network, computing devices, etc.).
(5/2)- The National Information Center trains and qualifies the human resources in the beneficiary entities to deal with the system.
(6/2)- The permanent main committee for monitoring the application of the Shumoos System, referred to in Article Four, Paragraph (1/4) of the Implementing Regulation, prepares the necessary forms to document violations of the provisions of the law and its implementing regulation.
(7/2)- Reports of violations of the provisions of this law and its implementing regulation and the documentation of violations are submitted to the departments and sections of investigations and criminal research in the regions, which are responsible for taking all necessary actions in this regard and forwarding them to the sub-committee to propose the necessary penalty.
(8/2)- The owner of the establishment or the responsible person is provided with a copy of the violation report upon its documentation, and if they refuse to receive the designated copy, a report is prepared accordingly. The complete violation documents are then submitted to the sub-committee in the region, which proposes the necessary penalty and forwards it to the main committee for evaluation. Subsequently, it recommends the assessment of the penalty and submits it to His Highness the Minister of Interior or his delegate for approval of the appropriate penalty, returning it to the regional police director to implement the penalty and provide the sub-committee with a copy of the issued decision for follow-up.
(9/2)- The relevant entities responsible for documenting violations must train their personnel on the documentation procedures and the use of forms and familiarize them with the system.
(10/2)- The government entities that issue licenses must inform the security entities supervising the Shumoos System (departments and sections of investigations and criminal research) in the event of canceling the activity or transferring its ownership so that the necessary action can be taken.
(11/2)- Anyone granted access rights to the system is considered responsible for the use of their specific privileges and bears legal responsibility for any consequences resulting from misuse.
(12/2)- The National Information Center must provide specific applications for recording (violations - penalties - reports - performance measurement for response speed in providing service to clients).
(13/2)- The departments and sections of investigations and criminal research must conduct the necessary security screening for the personnel granted usage privileges on the Shumoos System before granting them access, relying solely on a certificate of no prior offenses and the security screening in the systems available with investigations and criminal research.
(14/2)- The National Information Center must coordinate the prompt provision of consultation to the establishments obligated to participate in the Shumoos System by providing national identity readers, which should be specified within a timeframe not exceeding one year, and the establishments must provide those readers at their own expense.

  • (1/3)- The provisions of this Law and its executive regulations apply to private establishments that engage in the activities mentioned in Article Three and what falls under it, taking into account the definitions of the activities mentioned in this article in other laws and utilizing them along with the activities that fall under these names.

    • (1/1/3)- Tourist accommodation facilities refer to any place that primarily provides overnight services to tourists for a fee, whether this place is a hotel or any other residential unit serving the same purposes, along with any supporting services. As for rest houses, they are a piece of enclosed land with annexes prepared for rent.

    • (2/1/3)- The service provider affiliated with the National Information Center must facilitate all procedures for any establishment requesting participation in the Shumoos system regarding the technical service, ensuring that all procedures are completed within one working day.

    • (3/1/3)- Relevant authorities in the departments and sections of investigations and criminal research in the regions must facilitate all procedures for participation in the Shumoos system concerning them, and this must be done within one working day.

    • (4/1/3)- The owner of the establishment must provide an environment for using the Shumoos system, such as (system usage site - human resources - communication network - computer devices - etc.).

    • (5/1/3)- Every owner of a licensed establishment practicing tourist accommodation is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (6/1/3)- Participation in the Shumoos system is a prerequisite for granting an operating license or renewal for any establishment wishing to practice accommodation activities, and no establishment has the right to practice the activity unless it is participating in the Shumoos system. The license is also a prerequisite for participation in the Shumoos system.

    • (7/1/3)- Data for all guests and companions must be entered immediately into the Shumoos system without exception.

    • (8/1/3)- The data of the guests entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification for the guests, and the responsibility lies with the person entering the data.

    • (9/1/3)- The type of data entered is determined by the National Information Center in coordination with the permanent main committee for monitoring the implementation of the Shumoos system.

    • (10/1/3)- If the establishment has computer systems for recording guest data, it must link these systems to the Shumoos system regarding guest data.

    • (11/1/3)- The National Information Center provides a special code for each establishment.

    • (12/1/3)- Each establishment must have a clear postal address through participation in the Wasel postal service.

    • (13/1/3)- Establishments must nationalize data entry personnel in their Shumoos system within a period not exceeding two years.

    • (14/1/3)- The above applies to rest houses except for guest registration, and a unified contract model is prepared in the Shumoos system for this purpose, which includes a clause holding the tenant responsible for their guests. If the contract is not through the Shumoos system, the appropriate law for violation will be applied.

  • (2/3)- Car rental refers to establishments that engage in the activity of car rental.

    • (1/2/3)- The provisions of the following paragraphs apply to this activity (2/1/3) - (3/1/3) - (4/1/3) - (9/1/3) - (11/1/3) - (12/1/3) - (13/1/3).

    • (2/2/3)- Every owner of a licensed establishment practicing car rental is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (3/2/3)- Participation in the Shumoos system is a prerequisite for granting an operating license or renewal for any establishment wishing to practice car rental, and no establishment has the right to practice the activity unless it is participating in the Shumoos system. The license is also a prerequisite for participation in the Shumoos system.

    • (4/2/3)- Data for the renter must be entered immediately into the Shumoos system.

    • (5/2/3)- The renter's data entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification for the renter, and the responsibility lies with the person entering the data.

    • (6/2/3)- If the establishment has computer systems for recording renter data, it must link these systems to the Shumoos system regarding renter data.

    • (7/2/3)- The National Information Center must link the Tam system to the Shumoos system in all establishments registered in the Tam system.

  • (3/3)- Purchasing gold and jewelry from the dealer refers to (establishments and shops that purchase precious metals and gemstones resold from outside the commercial shops).

    • (1/3/3)- The National Information Center supports the Shumoos system by documenting the purchase of precious metals and gemstones from the dealer through automated imaging and their weights in grams, as well as recording complete identity data.

    • (2/3/3)- Every owner of a commercial shop for buying and selling precious metals and gemstones is tasked with registering in the Shumoos system and documenting and describing everything offered for sale and intended for purchase, recording complete information about it and the seller of those metals, and all data must be recorded in the Shumoos system.

    • (3/3/3)- The provisions of the following paragraphs apply to this activity (2/1/3) - (3/1/3) - (4/1/3) - (9/1/3) - (11/1/3) - (12/1/3) - (13/1/3).

    • (4/3/3)- The owner of the commercial shop for selling metals must provide (system usage site - human resources - communication network - computer devices - etc.).

    • (5/3/3)- Every owner of a licensed commercial shop engaged in buying and selling precious metals and gemstones is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (6/3/3)- Participation in the Shumoos system is a prerequisite for granting a license to open a new commercial shop or renewing any existing shop for selling precious metals and gemstones, and the owner must participate in the Shumoos system to practice buying and selling activities. The license is also a prerequisite for participation in the Shumoos system.

    • (7/3/3)- Data for all pieces of precious metals and gemstones presented to the shop owner for purchase must be documented through imaging and the data of the person who brought and presented them, entered immediately into the Shumoos system.

    • (8/3/3)- The data of the pieces of precious metals and gemstones and the data of the person who presented them entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification for the presenter, and the responsibility lies with the person entering the data.

    • (9/3/3)- If the establishment has computer systems for recording data on precious metals, gemstones, and customers, it must link these systems to the Shumoos system regarding data on precious metals, gemstones, and their sellers.

  • (4/3)- Transporting passengers between cities within the Kingdom or to outside it refers to (private establishments that engage in transporting passengers between cities within the Kingdom and to outside it using road networks for cars or buses, in addition to railway networks, including (air, land, and sea transport)).

    • (1/4/3)- The provisions of the following paragraphs apply to this activity (2/1/3) - (3/1/3) - (4/1/3) - (9/1/3) - (11/1/3) - (12/1/3) - (13/1/3).

    • (2/4/3)- Every owner of a licensed establishment practicing passenger transport within the Kingdom or to outside it, whether the activity is land transport by cars or trains, air transport, or sea transport, is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (3/4/3)- Participation in the Shumoos system is a prerequisite for granting an operating license or renewal for any establishment wishing to practice passenger transport between cities in the Kingdom or to outside it, and no establishment has the right to practice the activity unless it is participating in the Shumoos system. The license is also a prerequisite for participation in the Shumoos system.

    • (4/4/3)- Data for passengers must be entered immediately into the Shumoos system.

    • (5/4/3)- The data of the passengers entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification for the passenger, and the responsibility lies with the person entering the data.

    • (6/4/3)- If the establishment has computer systems for recording passenger data, it must link these systems to the Shumoos system regarding passenger data.

  • (5/3)- Transporting vehicles refers to (private establishments that engage in transporting vehicles within the Kingdom or to outside it using designated transport means).

    • (1/5/3)- The provisions of the following paragraphs apply to this activity (2/1/3) - (3/1/3) - (4/1/3) - (9/1/3) - (11/1/3) - (12/1/3) - (13/1/3).

    • (2/5/3)- Every owner of a licensed establishment practicing vehicle transport is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (3/5/3)- Participation in the Shumoos system is a prerequisite for granting an operating license or renewal for any establishment wishing to practice vehicle transport, and no establishment has the right to practice the activity unless it is participating in the Shumoos system. The license is also a prerequisite for participation in the Shumoos system.

    • (4/5/3)- Data for the vehicle, sender, and recipient must be entered immediately into the Shumoos system.

    • (5/5/3)- The data of the vehicle, sender, and recipient entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification and vehicle documents, and the responsibility lies with the person entering the data.

    • (6/5/3)- If the establishment has computer systems for recording data on vehicles, senders, and recipients, it must link these systems to the Shumoos system regarding this data.

  • (6/3)- Real estate rental refers to (any establishment that engages in real estate rental activities of all types).

    • (1/6/3)- The provisions of the following paragraphs apply to this activity (2/1/3) - (3/1/3) - (4/1/3) - (9/1/3) - (11/1/3) - (12/1/3) - (13/1/3).

    • (2/6/3)- Every owner of a licensed establishment practicing real estate rental is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (3/6/3)- Participation in the Shumoos system is a prerequisite for granting an operating license or renewal for any establishment wishing to practice real estate rental, and no establishment has the right to practice the activity unless it is participating in the Shumoos system. The license is also a prerequisite for participation in the Shumoos system.

    • (4/6/3)- Data for the renter must be entered immediately into the Shumoos system.

    • (5/6/3)- The renter's data entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification for the renter, and the responsibility lies with the person entering the data.

    • (6/6/3)- If the establishment has computer systems for recording renter data, it must link these systems to the Shumoos system regarding renter data.

    • (7/6/3)- Data for renters and their companions must be fully recorded in the Shumoos system.

    • (8/6/3)- A unified contract model is prepared in the Shumoos system that includes the data of the landlord, tenant, purpose of the lease, and duration, and no legal claims will be accepted from the landlord before official authorities if the contract is not documented in the Shumoos system.

  • (7/3)- Sports centers refer to (sports establishments that are invested by the private and government sectors, including sports clubs, sports centers, youth houses, recreational sports halls, recreational sports centers, shooting and archery clubs, car and motorcycle racing tracks, fitness centers, and other sports activities).

    • (1/7/3)- The provisions of the following paragraphs apply to this activity (2/1/3) - (3/1/3) - (4/1/3) - (9/1/3) - (11/1/3) - (12/1/3) - (13/1/3).

    • (2/7/3)- Every owner of a licensed establishment practicing sports activities is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (3/7/3)- Participation in the Shumoos system is a prerequisite for granting an operating license or renewal for any establishment wishing to practice sports activities, and no establishment has the right to practice the activity unless it is participating in the Shumoos system. The license is also a prerequisite for participation in the Shumoos system.

    • (4/7/3)- Data for members and visitors of these clubs and centers must be entered immediately into the Shumoos system.

    • (5/7/3)- The data of members and visitors of these clubs and centers entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification, and the responsibility lies with the person entering the data.

    • (6/7/3)- If the establishment has computer systems for recording data on its members and visitors, it must link these systems to the Shumoos system regarding their data.

  • (8/3)- Selling vehicles that have been deregistered (salvage shops) refers to (shops that sell vehicles, cars, public works equipment, and motorcycles after they have been deregistered by traffic authorities (salvaged) or dismantled and sold parts of them).

    • (1/8/3)- The provisions of the following paragraphs apply to this activity (2/1/3) - (3/1/3) - (4/1/3) - (9/1/3) - (11/1/3) - (12/1/3) - (13/1/3).

    • (2/8/3)- Every owner of a licensed establishment practicing the sale of deregistered vehicles or parts thereof (salvage) is obliged to participate in the Shumoos system, and in case of violation, the penalties stated in the law will be applied.

    • (3/8/3)- Participation in the Shumoos system is a prerequisite for granting an operating license or renewal for any establishment wishing to practice the sale of deregistered vehicles or parts thereof (salvage), and no establishment has the right to practice the activity unless it is participating in the Shumoos system. The license is also a prerequisite for participation in the Shumoos system.

    • (4/8/3)- Data for the vehicle, seller, transporter, and buyer or parts thereof must be entered in detail and immediately into the Shumoos system.

    • (5/8/3)- The data of the vehicle, seller, transporter, and buyer or parts thereof entered into the Shumoos system must be accurate and complete, based on national IDs, passports, or any approved personal identification for them, and the responsibility lies with the person entering the data.

    • (6/8/3)- If the establishment has computer systems for recording data on its clients, it must link these systems to the Shumoos system.

  • (1/4)- A permanent main committee shall be formed to follow up on the implementation of the Shumus Law, chaired by the Assistant Director of Public Security for Security Affairs, and including members from the General Investigations, the Ministry of Interior's Agency for Regional Affairs, the National Information Center, the General Administration for Legal Affairs and International Cooperation, the Ministry of Municipal and Rural Affairs, the Ministry of Transport, the Ministry of Commerce and Industry, the General Authority for Tourism and Antiquities, and the General Presidency for Youth Welfare. The President of the Committee shall submit to His Highness the Minister of Interior any recommendations for participation that he deems necessary for approval. This committee is tasked with the following duties:

    • A- Defining the tasks, responsibilities, and roles of each entity in the implementation of this law.

    • B- Establishing a unified mechanism for registering establishments in the Shumus system. C- Establishing a unified mechanism for determining penalties for establishments that violate the registration of data of their clients in the Shumus system and identifying the competent authority to enforce the penalty.

    • D- Supervising the work of the permanent sub-committees in the regions.

    • E- Communicating with relevant governmental departments regarding all instructions related to the law that may arise later, as well as notifying them of the violating entities to apply the laws against them.

    • F- Submitting periodic reports to His Highness the Minister of Interior.

  • (2/4)- Permanent sub-committees shall be formed to follow up on the implementation of the Shumus Law in the regions, chaired by a representative of the emirate, with members from Public Security (Investigations and Criminal Research) and the Ministry of Interior (General Investigations) - the General Authority for Tourism and Antiquities - the Municipalities and Municipal Affairs - Transport - Commerce and Industry - Youth Welfare. Their formation shall be approved by a decision from the main permanent committee for following up on the implementation of the Shumus Law.

  • (3/4)- The Ministry of Interior must provide the necessary resources and requirements for the permanent sub-committee.

  • (4/4)- The National Information Center shall operate the Shumus system.

  • (5/4)- Public Security (General Administration for Investigations and Criminal Research) shall supervise the implementation of this law.

  • (6/4)- Written and effective procedures for the development of the Shumus system shall be established by the National Information Center.

  • (7/4)- The main permanent committee for following up on the implementation of the Shumus Law shall update the controls, procedures, and necessary measures for monitoring and verifying the implementation of the Shumus Law.

  • (8/4)- The main permanent committee for following up on the implementation of the Shumus Law shall periodically update the controls and procedures in coordination with the National Information Center.

  • (9/4)- The National Information Center shall prepare continuous training programs for employees and specialists to familiarize them with the Shumus system and the related instructions.

  • (10/4)- The National Information Center shall establish an independent unit equipped with sufficient resources to oversee and technically supervise as well as develop the system.

  • (1/5) - The National Information Center is responsible for connecting with the relevant government entities that grant licenses for establishments engaged in activities under this law.

  • (2/5) - The National Information Center is responsible for establishing a monitoring screen for the licensed government entities to follow up on their respective establishments, which includes a special application for displaying shipments only and an application for exchanging reports between the General Security Administration and establishments violating the provisions of this law, as follows:

    • (1/2/5):

      • (a) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the headquarters of the General Authority for Tourism and Antiquities to monitor shipments related to (tourist accommodation facilities) throughout the Kingdom.

      • (b) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the branches of the General Authority for Tourism and Antiquities in the regions to monitor shipments related to (tourist accommodation facilities) under their administrative jurisdiction and informing the departments and sections of investigations and criminal research about establishments that are failing in shipments.

    • (2/2/5):

      • (a) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the Ministry of Transport headquarters to monitor shipments related to (car rentals - passenger transport between cities within the Kingdom, or to outside it - vehicle transport) throughout the Kingdom.

      • (b) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the branches of the Ministry of Transport in the regions to monitor shipments related to (car rentals - passenger transport between cities within the Kingdom, or to outside it - vehicle transport) under their administrative jurisdiction and informing the departments and sections of investigations and criminal research about establishments that are failing in shipments.

    • (3/2/5):

      • (a) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the Ministry of Municipal and Rural Affairs headquarters to monitor shipments related to (rental of rest houses - sale of vehicles whose registration has been canceled (scrap shops)) throughout the Kingdom.

      • (b) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the municipalities and local councils in the regions to monitor shipments related to (rental of rest houses - sale of vehicles whose registration has been canceled (scrap shops)) under their administrative jurisdiction and informing the departments and sections of investigations and criminal research about establishments that are failing in shipments.

    • (4/2/5):

      • (a) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the Ministry of Commerce and Industry headquarters to monitor shipments related to (purchase of gold and jewelry from dealers - real estate rental) throughout the Kingdom.

      • (b) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the branches of the Ministry of Commerce and Industry in the regions to monitor shipments related to (purchase of gold and jewelry from dealers - real estate rental) under their administrative jurisdiction and informing the departments and sections of investigations and criminal research about establishments that are failing in shipments.

    • (5/2/5):

      • (a) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the General Presidency for Youth Welfare headquarters to monitor shipments related to (sports centers) throughout the Kingdom.

      • (b) - Establishing a monitoring screen for shipments, and submitting and receiving reports at the branches of the General Presidency for Youth Welfare in the regions to monitor shipments related to (sports centers) under their administrative jurisdiction and informing the departments and sections of investigations and criminal research about establishments that are failing in shipments.

  • (3/5) - Establishing an application for the departments and sections of investigations and criminal research in the regions to inform government entities about establishments obligated to participate in the Shumoos system that operate without a license, each in their respective area.

  • (4/5) - Establishing an application at the General Security (General Administration of Investigations and Criminal Research) as well as the main government entities to follow up on the status of closing reports in the regions.

  • (5/5) - Establishing an application for government entities that includes a feature to cancel the participation of an establishment when its activity license is revoked.

  • (6/5) - Maintaining the confidentiality of the information of those submitting reports regarding violations of this law.

  • (7/5) - The Ministry of Interior's Agency for Regional Affairs and the subcommittees in the regions of the Kingdom will be provided with monitoring screens and granted full access to the Shumoos system.

  • (8/5) - The main committee will coordinate with any entity that requires coordination to serve and achieve the interests of this law.

(1/6) - The establishment shall not be registered with the Government Agency that issues the License unless the establishment is enrolled in the Shumoos system, granting the licensing government agencies the authority to access the registration in the Shumoos system.

(1/7)- Private establishments are required to participate and fully comply with the instructions issued by the regulatory authorities regarding the implementation of the Shumoos system.
(2/7)- The National Information Center shall prepare a unified automated form for registering clients for private establishments, specifying the required data to be recorded in coordination with the Permanent Main Committee for Monitoring the Implementation of the Shumoos System.
(3/7)- In the case of incomplete or incorrect registration, or delays in registration, the responsible party shall be penalized with the penalty stated in paragraph two of Article Nine, and if there is intent to commit a crime in this violation, a criminal lawsuit shall be filed against the responsible party.

(1/9) - The other regulations referred to in this article include all regulations issued by the supervisory authorities over private establishments, including, for example, the Tourism System, the Commercial Register System, the Penalties and Sanctions Regulation for Municipal Violations, the Youth Hostels System, the Public Transport System on Roads, the Private Civil Security Guards System, and others.

(1/11)- The National Information Center shall take the necessary technical and procedural measures to ensure the privacy of private entities and the confidentiality of customer data.
(2/11)- The National Information Center and all supervisory authorities dealing with this law shall take the necessary procedures to ensure that this law and the data are not used for unintended purposes.
(3/11)- Employees of all entities who obtain information while performing their duties are obligated to maintain the confidentiality of that information, even after their employment is terminated, and such information shall not be used for purposes other than those specified in this law.
(4/11)- Anyone who uses the information for purposes other than those for which it was intended or its entities shall be subject to criminal and civil liability.

(1/13) - The provisions of this Regulation shall come into effect immediately upon its approval, and the Implementing Regulation shall be reviewed for the purposes of updating within three years or whenever the need arises.