Digital Policy Alert logo

Saudi Arabia: Rules Governing Issuance of Accreditation Certificates for Controllers and Processers

Progress

Current status
in force
17 Feb 2026 in force
11 Jan 2025 processing consultation
11 Dec 2024 in consultation

Scope

Implementers
Saudi Arabia
Policy Area
Authorisation, registration and licensing
Policy Instrument
Authorisation of goods or services
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

17 Feb 2026
in force

Saudi Data and AI Authority issued rules governing the issuance of accreditation certificates for controllers and processers

On 17 February 2026, the Saudi Data and AI Authority (SDAIA) issued the Rules Governing the Issuance of Accreditation Certificates for Controllers and Processers, which became effective upon their online publication. The rules apply to both authoris…

Source
Event type order
Action type implementation
Government branch executive
Government body data protection authority
11 Jan 2025
processing consultation

Saudi Data and AI Authority closes consultation on rules governing the issuance of accreditation certificates in personal data protection

On 11 January 2025, the Saudi Data and AI Authority (SDAIA) closes its public consultation on a regulatory framework for the issuance of accreditation certificates for personal data processing entities. The rules apply to government and private enti…

Source
Event type order
Action type consultation closed
Government branch executive
Government body data protection authority
11 Dec 2024
in consultation

Saudi Data and AI Authority opened consultation on rules governing the issuance of accreditation certificates in personal data protection

On 11 December 2024, the Saudi Data and AI Authority (SDAIA) opened a public consultation on a regulatory framework for the issuance of accreditation certificates for personal data protection entities until 11 January 2025. The rules apply to govern…

Source
Event type order
Action type consultation opened
Government branch executive
Government body data protection authority