Saudi Arabia
SubstantialPersonal Data Protection Law (PDPL) 2021
Authority: Saudi Data & AI Authority (SDAIA) | Enforcement: Active | Enacted: September 2023
Overview
Saudi Arabia's PDPL became fully enforceable in September 2023 after a one-year grace period. It applies to processing of personal data within Saudi Arabia and extraterritorially. SDAIA oversees enforcement. The law includes data localisation provisions.
14-Topic Coverage
Data Protection Authority
Fully AddressedSDAIA and its National Data Management Office oversee compliance.
Consent Requirements
Fully AddressedExplicit consent required as primary basis. Other bases include contract and legal obligation.
Data Subject Rights
Fully AddressedRights to be informed, access, rectification, destruction, and restriction.
Cross-Border Transfer
Fully AddressedTransfers require adequate protection assessment or consent. Implementing regulations detail criteria.
Breach Notification
Fully AddressedNotification to SDAIA required for personal data breaches.
DPO Requirements
Partially AddressedRegulations may require DPO for certain organisations.
Children's Data
Partially AddressedGeneral provisions apply. Enhanced obligations for sensitive data.
Penalties & Enforcement
Fully AddressedFines up to SAR 5 million. Criminal penalties including imprisonment for certain violations.
Sector-Specific Rules
Fully AddressedSAMA for financial, NCA for cybersecurity, healthcare regulations.
Cookie/Tracking
Partially AddressedNo specific provisions. General consent framework applies.
AI & Automated Decisions
Partially AddressedSDAIA's national AI strategy. No specific AI data protection provisions.
Data Localisation
Fully AddressedTransfer restrictions with assessment requirements. Some categories require local storage.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedGovernment processing has specific provisions and exemptions.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Saudi Arabia's regulations.
Book a Consultation