Saudi Arabia: Data protection regulation in amendment to Implementing Regulation of Personal Data Protection Law

Saudi Data and AI Authority closes consultation on proposed amendments to the Implementing Regulation of Personal Data Protection Law including registration requirements for data controllers

Saudi Data and AI Authority closes consultation on General Rules for Secondary Use of Data

Data and Artificial Intelligence Authority published risk assessment guideline for cross-border personal data transfers

Authority for Data and Artificial Intelligence closes consultation on unified databases project for issuing accreditation certificates in personal data protection

Closed consultation on SDAIA licensing rules for personal data processing, auditing, and certification issuance

Published SDAIA personal data breach incidents procedural guide

Implemented Personal Data Protection Law Amendments including data protection authority governance

Implemented Personal Data Protection Law Amendments including cross-border data transfer regulation

Implemented Personal Data Protection Law Amendments including data protection regulations

Entry into force of Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

Entry into force of Implementing Regulation of the Personal Data Protection Law

Entry into force of Regulations for transferring personal data outside the geographical borders of the Kingdom of Saudi Arabia

Published SDAIA Personal Data Destruction, Anonymisation, and Pseudonymisation Guideline

Published SDAIA Personal Data Processing Activities Records Guideline

Implemented SDAIA Guidelines for Binding Common Rules (BCR) for Personal Data Transfer

Implemented SDAIA Standard Contractual Clauses for Personal Data Transfer

Adopted Rules Governing the National Register of Controllers Processing Personal Data

Implemented amendments to Regulation on Personal Data Transfer outside the Kingdom

Published SDAIA Elaboration and Developing Privacy Policy Guideline

Implemented SDAIA Minimum Personal Data Determination Guideline

Adopted SDAIA’s Rules for Appointing Personal Data Protection Officer

Postponed implementation of Personal Data Protection Law based on 2023 amendments

Closed consultation on Framework on Use of Secondary Data

Implemented Data and Privacy Regulatory Sandbox

Adopted Data Management and Personal Data Protection Standards

Adopted National Data Governance Policy including Cross-Border Data Transfer Regulation

Adopted National Data Governance Policy including Data Protection Regulation