Progress

Current status
in grace period
14 Sep 2024 in force
14 Sep 2023 in grace period
21 Mar 2023 adopted
20 Dec 2022 in consultation
20 Nov 2022 in consultation

Scope

Implementers
Saudi Arabia
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

14 Sep 2024
in force

Implemented Personal Data Protection Law Amendments including data protection regulations

On 14 September 2024, the Amended Personal Data Protection Law is implemented. Firstly, the amendments outline the subject data rights, including the right to be informed on the purpose of data collection and access, rectify and delete personal data…

Source
Event type law
Action type implementation
Government branch executive
Government body data protection authority
14 Sep 2023
in grace period

Entry into force with grace period of Personal Data Protection Law Amendments including data protection regulations

On 14 September 2023, the Personal Data Protection Law Amendments entered into force with a grace period of one year. Firstly, the amendments outline the subject data rights, including the right to be informed on the purpose of data collection and a…

Source
Event type law
Action type in force with grace period
Government branch executive
Government body data protection authority
21 Mar 2023
adopted

Adopted Personal Data Protection Law Amendments including data protection regulations

On 21 March 2023, the Saudi Arabia Council of Ministers adopted the amendments to the Personal Data Protection Law of 2021. The amendments expand the scope of the Personal Data Protection Law. In particular, the foreign entities processing the data …

Source
Event type law
Action type adoption
Government branch executive
Government body data protection authority
20 Dec 2022
in consultation

Closed consultation on Personal Data Protection Law Amendments including data protection regulations

On 20 December 2022, the Saudi Authority for Data and Artificial Intelligence closed the public consultation on its draft amendment to the Personal Data Protection Law of 2021. The draft amendments aim to expand the scope of the Personal Data Protec…

Source
Event type law
Action type consultation opened
Government branch executive
Government body data protection authority
20 Nov 2022
in consultation

Opened consultation on Personal Data Protection Law Amendments including data protection regulations

On 20 November 2022, the Saudi Authority for Data and Artificial Intelligence released a draft outlining amendments to the Personal Data Protection Law of 2021 and opened a public consultation until 20 December 2022. The draft amendments aim to expa…

Source
Event type law
Action type consultation opened
Government branch executive
Government body data protection authority