Saudi Arabia: Cybersecurity regulation in Executive Regulations of the Personal Data Protection Law

Progress

Current status

in force

14 Sep 2024 in force

07 Sep 2023 adopted

31 Jul 2023 processing consultation

11 Jul 2023 in consultation

Scope

Implementers

Saudi Arabia

Policy Area

Data governance

Policy Instrument

Cybersecurity regulation

Regulated Economic Activity

cross-cutting

Government Branch

executive

Government Body

central government

other regulatory body

Implementation Level

national

Timeline of events

14 Sep 2024

in force

Entry into force of Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

On 14 September 2024, the Implementing Regulation of the Personal Data Protection Law (PDPL) became effective alongside the PDPL itself. It stipulates that data controllers must implement comprehensive security measures to safeguard personal data an…

Source

Event type order

Action type implementation

Government branch executive

Government body central government

07 Sep 2023

adopted

Published Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

On 7 September 2023, the final version of the Implementing Regulation of the Personal Data Protection Law (PDPL) was published. The Implementing Regulation stipulates that data controllers must implement comprehensive security measures to safeguard …

Source

Event type order

Action type adoption

Government branch executive

Government body central government

31 Jul 2023

processing consultation

Closed consultation on Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

On 31 July 2023, the Authority for Data and Artificial Intelligence closed the public consultation on the draft Implementing Regulation of the Personal Data Protection Law (PDPL). The draft stipulates that data controllers must implement comprehensi…

Source

Event type order

Action type consultation closed

Government branch executive

Government body other regulatory body

11 Jul 2023

in consultation

Opened consultation on Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

On 11 July 2023, the Authority for Data and Artificial Intelligence published the draft Implementing Regulation of the Personal Data Protection Law (PDPL) and opened a public consultation until 31 July 2023. The draft stipulates that data controller…

Source

Event type order

Action type consultation opened

Government branch executive

Government body other regulatory body

Progress

Scope

Timeline of events

Entry into force of Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

Published Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

Closed consultation on Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

Opened consultation on Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

Related changes

Saudi Arabia: Data and Artificial Intelligence Authority risk assessment guideline for cross-border personal data transfers

Saudi Arabia: SDAIA unified databases project for issuing accreditation certificates in personal data protection

Saudi Arabia: SDAIA licensing rules for personal data processing, auditing, and certification issuance

Saudi Arabia: SDAIA Personal Data Breach Incidents Procedural Guide

Saudi Arabia: Data protection regulation in Executive Regulations of the Personal Data Protection Law

Saudi Arabia: Regulations for transferring personal data outside the geographical borders of the Kingdom of Saudi Arabia

Saudi Arabia: Data protection authority governance in Amendments to Personal Data Protection Law

Saudi Arabia: Cross-border data transfer regulation in Amendments to Personal Data Protection Law

Saudi Arabia: Data protection regulation in Amended Personal Data Protection Law

Saudi Arabia: SDAIA Personal Data Destruction, Anonymisation, and Pseudonymisation Guideline

Saudi Arabia: SDAIA Personal Data Processing Activities Records Guideline

Saudi Arabia: SDAIA guide on preparation of binding common rules for transfer of personal data

Saudi Arabia: SDAIA order approving Standard Contractual Clauses for Transfer of Personal Data

Saudi Arabia: SDAIA Rules Governing the National Register of Controllers Processing Personal Data

Saudi Arabia: Amendments to the regulations on transferring personal data outside the Kingdom

Saudi Arabia: SDAIA Elaboration and Developing Privacy Policy Guideline

Saudi Arabia: SDAIA Minimum Personal Data Determination Guideline

Saudi Arabia: SDAIA rules for appointing personal data protection officer

Saudi Arabia: Data protection measures in Personal Data Protection Law

Saudi Arabia: Framework on the Use of Secondary Data

Saudi Arabia: Data and Privacy Regulatory Sandbox

Saudi Arabia: Data Management and Personal Data Protection Standards

Saudi Arabia: Cross-border data transfer regulation in National Data Governance Policies

Saudi Arabia: Data protection regulation in National Data Governance Policies