The short answer
Use the provider’s official website, share only what the stated service needs and never give a course seller your Mumaris+ password or one-time code.
Understand why information is requested
A provider may need information to match enrolment with a professional attendance record. Before entering it, check who is collecting it, why it is required and where the privacy notice can be read. An unexplained request in a private social-media message deserves more scrutiny than a clearly described field on the official service.
SDAIA’s public guidance explains purpose limitation, data minimisation and individual rights. As a practical habit, provide the minimum appropriate information and keep identity documents out of public groups. This guide is general privacy guidance, not an individual legal assessment.
Keep account access to yourself
Navigate to official practitioner services from SCFHS’s own digital-platforms page. Check the destination before entering credentials. A provider can explain what record information it needs without requiring your personal password or access to your email.
Do not forward one-time codes, approve unexpected sign-in requests or install remote-control software merely to obtain CME hours. If someone promises to “fix the balance” by taking over your account, stop. Use official support routes for account problems.
When sharing a certificate publicly, remove identity numbers, personal contact details and any verification code that grants access to private information. Keep an unaltered original privately for legitimate verification.
Write safer support messages
Begin with the activity title, booking reference and a clear description. Provide further identifiers only through the secure route the responsible organisation requests. Do not include patient information in examples, screenshots or learning reflections.
Saudi CME does not need your SCFHS login or national identity to answer a directory question. Our planner does not access your official account. If you choose to save the private log, it stays in that browser and can be deleted there; use export for your own backup and avoid shared devices.
Sources & checks
Primary sources used for the facts above. Our checklists and hypothetical examples are planning guidance, not official decisions.
- SDAIA · Personal data protection principles ↗Official explanation of data minimisation and individual rights, not individual legal advice.
- SCFHS · Official digital platforms ↗Safe starting point for Mumaris+, Mustamir and the digital learning platform.
This guide concerns learning administration, not clinical treatment. Your official record and current activity conditions determine your situation. Found an error? Request a correction.