Saudi Arabia: Cross-border data transfer regulation in Amendments to Personal Data Protection Law
Progress
Scope
Timeline of events
Implemented Personal Data Protection Law Amendments including cross-border data transfer regulation
On 14 September 2024, the Amended Personal Data Protection Law is implemented. Firstly, the Law stipulated that the transfer of data would be allowed to other jurisdictions if it does not prejudice the Kingdom's national security. Secondly, the tra…
SourceEntry into force with grace period of Personal Data Protection Law Amendments including cross-border data transfer regulation
On 14 September 2023, the Personal Data Protection Law Amendments entered into force with a grace period of one year. Firstly, the Law stipulated that the transfer of data would be allowed to other jurisdictions if it does not prejudice the Kingdom'…
SourceAdopted Personal Data Protection Law Amendments including cross-border data transfer regulation
On 21 March 2023, the Saudi Arabia Council of Ministers adopted the amendments to the Personal Data Protection Law of 2021. Firstly, the Law stipulated that the transfer of data would be allowed to other jurisdictions if it does not prejudice the Ki…
SourceClosed consultation on Personal Data Protection Law Amendments including cross-border data transfer regulation
On 20 December 2022, the Saudi Authority for Data and Artificial Intelligence closed the public consultation on its draft amendment to the Personal Data Protection Law of 2021. Under this amendment, the transfer of data outside Saudi Arabia would be…
SourceOpened consultation on Personal Data Protection Law Amendments including cross-border data transfer regulation
On 20 November 2022, the Saudi Authority for Data and Artificial Intelligence released a draft amendment to the Personal Data Protection Law of 2021 and opened a public consultation until 20 December 2022. Under this amendment, the transfer of data …
Source