Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
12 events advancing 12 policy or regulatory changes:
Graph
Table
National Program for Research, Development, and Innovation in Cybersecurity (RDI)
Launched National Program for Research, Development, and Innovation in Cybersecurity (RDI)
On 9 May 2024, the National Cybersecurity Authority (NCA) of Saudi Arabia launched the National Program for Research, Development, and Innovation in Cybersecurity (RDI). The RDI aims to encourage research and development in key cybersecurity areas, …
Quality of service requirement in Amended User Protection Regulations (Resolution 552/1445)
Implemented Amended User Protection Regulations (Resolution 552/1445) including quality of service requirement
On 8 May 2024, the Saudi Communications and Information Technology Commission (CITC) implemented the Amended User Protection Regulations (Resolution 552/1445). The updated regulations follow the "Regulations for the Protection of the Rights of Users…
Data protection regulation in Amended User Protection Regulations (Resolution 552/1445)
Implemented Amended User Protection Regulations (Resolution 552/1445) including data protection regulation
On 8 May 2024, the Saudi Communications and Information Technology Commission (CITC) Amended User Protection Regulations (Resolution 552/1445) entered into force. The updated regulations follow the "Regulations for the Protection of the Rights of Us…
Cybersecurity regulation in Amended User Protection Regulations (Resolution 552/1445)
Implemented Amended User Protection Regulations (Resolution 552/1445) including cybersecurity regulation
On 8 May 2024, the Saudi Communications and Information Technology Commission (CITC) Amended User Protection Regulations (Resolution 552/1445), including cybersecurity regulation, entered into force. The updated regulations follow the "Regulations …
SDAIA Rules Governing the National Register of Controllers Processing Personal Data
Closed consultation on SDAIA Draft Rules Governing the National Register of Controllers Processing Personal Data
On 24 April 2024, the Saudi Data and AI Authority (SDAIA) closed its public consultation on Draft Rules governing the national register of controllers processing personal data. The draft rules aim at creating a unified register for improved complian…
Update on National Data Sharing Policy
Closed public consultation on Updated National Data Sharing Policy
On 18 April 2024, Saudi Arabia's Data Protection Authority (SDAIA) closed the public consultation on the updated National Data Sharing Policy, including a framework for private and public entities to request data. The policy revision aims to enhance…
Amendments to the regulations on transferring personal data outside the Kingdom
Closed consultation on draft amendments to the regulations on transferring personal data outside the Kingdom
On 18 April 2024, the Authority for Data and Artificial Intelligence closed the public consultation on the draft amendments to the regulation on the transfer of personal data outside the geographical borders of the Kingdom of Saudi Arabia (KSA). The…
Data protection authority governance in Amendments to Personal Data Protection Law
Entry into force with grace period of Personal Data Protection Law Amendments including data protection authority governance
On 14 September 2023, the Personal Data Protection Law Amendments entered into force with a grace period of one year. The amendment foresees the choice of a competent Authority through a resolution of the Council of Ministers. The Authority will enf…
Implementing Regulation of the Personal Data Protection Law
Published Implementing Regulation of the Personal Data Protection Law
On 7 September 2023, the final version of the Implementing Regulation of the Personal Data Protection Law (PDPL) was published. The Implementing Regulation outlines the data subject rights, such as the right to be informed on the purpose of data col…
Regulations for transferring personal data outside the geographical borders of the Kingdom of Saudi Arabia
Published Regulations for transferring personal data outside the geographical borders of the Kingdom of Saudi Arabia
On 7 September 2023, the Authority for Data and Artificial Intelligence published the regulations on the transfer of personal data outside the geographical borders of the Kingdom of Saudi Arabia (KSA). The transfer of personal data is allowed if it …