Mumtathil: Automatic PDPL compliance identification system of Arabic privacy policies documents

Abstract

In the digital era, the extensive collection and use of personal data by websites and applications has prompted various countries to implement data protection laws. The Kingdom of Saudi Arabia introduced the Personal Data Protection Law (PDPL) to regulate the handling of personal data. However, manually assessing compliance with these laws is time-consuming, and costly. This paper presents an automated system named Mumtathil (مُمتثِل) that evaluates the compliance of Arabic privacy policies with the PDPL using multi-label classification (MLC) techniques. Our experiments demonstrated that the Support Vector Machine (SVM) outperformed other machine learning models and transformer-based models like CamelBERT and AraBERT, achieving an F-score of 92%. The system addresses dataset imbalance by augmenting the Saudi Privacy Policy Dataset with recent privacy policies and synthetic data generated using ChatGPT. The Mumtathil tool simplifies compliance assessment, reducing time, cost, and effort while enhancing transparency and data protection in the digital landscape.