DPA

Saudi Arabia: Data protection measures in Personal Data Protection Law

Progress

Current status
in force
17 Mar 2023 in force
22 Mar 2022 adopted
16 Sep 2021 in grace period
14 Sep 2021 adopted

Scope

Implementers
Saudi Arabia
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
central government
Implementation Level
national

Timeline of events

17 Mar 2023
in force

Implemented Personal Data Protection Law

The Personal Data Protection Law comes into effect on 17 March 2023 after its initial implementation in March 2022 was postponed. The Law aims to ensure that the processing of personal data relating to an individual satisfies certain mandatory requi…

Source
Event type law
Action type implementation
Government branch executive
Government body central government
22 Mar 2022
adopted

Postponed Implementation of Personal Data Protection Law

On 22 March 2022, the Saudi Arabian Data & AI Authority stated on Twitter that the implementation Personal Data Protection Law has been postponed. Initially set to come into effect on 23 March 2022, the Law will now be implemented on 17 March 2023. …

Source
Event type law
Action type postponement
Government branch executive
Government body central government
16 Sep 2021
in grace period

Entry into force of Personal Data Protection Law with grace period

The Personal Data Protection Law enters into force following the approval by the Saudi King. It introduces legislation to ensure that the processing of personal data relating to an individual satisfies certain mandatory requirements to ensure the da…

Source
Event type law
Action type in force with grace period
Government branch executive
Government body central government
14 Sep 2021
adopted

Adopted Personal Data Protection Law

The Personal Data Protection Law is adopted by the Council of Minister of Saudi Arabia. It introduces legislation to ensure that the processing of personal data relating to an individual satisfies certain mandatory requirements to ensure the data ow…

Source
Event type law
Action type adoption
Government branch executive
Government body central government