Yes, you have clear rights to both access and correct your personal data under Saudi Arabia's Personal Data Protection Law (PDPL). Article 9 requires Controllers — meaning any company, employer, or organisation that holds your data — to provide you with all the information necessary to exercise your rights. This includes the right to access your personal data, know how it is being used, and understand who it may be shared with.
Article 12 further requires Controllers to take necessary measures to ensure your personal data is accurate and kept up to date throughout the period they hold it. This means if you identify incorrect information — for example, a wrong address, outdated employment record, or an error in a health file — the company is legally obligated to correct it.
To exercise these rights in practice, send a written request (email is fine) to the company's data protection or privacy contact. If the company has appointed a Data Protection Officer (required in certain cases under Article 15), direct your request to them. Keep a record of your request and the date you sent it. If a company refuses or ignores your request without a valid legal reason, this may constitute a violation subject to penalties under Article 19, and you can report it to SDAIA, Saudi Arabia's data protection regulator.
This is general legal information, not legal advice. For advice on your specific situation, consult a lawyer licensed in Saudi Arabia.