Since September 2024, a thermal receipt carrying a customer's phone number is personal data. This guide explains why, what it means for your business, and how to turn compliance into an advantage.
A printed thermal receipt usually carries the customer's phone number, name, or loyalty ID. Under Saudi Arabia's Personal Data Protection Law (PDPL), enforced by SDAIA, that is personal data — printing, storing, or discarding it without consent logs and retention policies exposes you to fines up to SAR 5 million per violation.
SDAIA has already issued 48+ enforcement decisions, and organizations must notify it of a breach within 72 hours.
ZATCA e-invoicing has been mandatory since 2023, and PDPL has been fully enforced since September 2024. Paper doubles the complexity: two vendors, two legal reviews, two failure points. A Wateer digital receipt covers both regimes at once — consent logged, data encrypted, audit-ready.
A 4–5 minute integration with Foodics, RETM, Onyx Pro, or any major Saudi POS — zero change to how cashiers work.
Every receipt is delivered digitally with an evidence-grade consent log and retention policy — structured the way SDAIA expects.
Via NFC or QR — with feedback, loyalty, offers, and quick returns built in.
Saudi Arabia's PDPL came into full force in September 2024, enforced by SDAIA. Thermal receipts carrying customer phone numbers, names, or loyalty IDs are personal data.
Up to SAR 5,000,000 per violation, doubled for repeat offenders — with 48+ enforcement decisions already issued.
Wateer replaces thermal printers with digital receipts via NFC or QR, logging consent per receipt and encrypting data — integration takes 4–5 minutes with any major Saudi POS.
Yes. A single integration covers both PDPL and ZATCA — no second vendor, no second legal review.
See the plans and pick what fits your receipt volume, or talk to us for a live demo.