Saudi Arabia: Amendments to the regulations on transferring personal data outside the Kingdom

Data and Artificial Intelligence Authority published risk assessment guideline for cross-border personal data transfers

Authority for Data and Artificial Intelligence closes consultation on unified databases project for issuing accreditation certificates in personal data protection

Closed consultation on SDAIA licensing rules for personal data processing, auditing, and certification issuance

Published SDAIA personal data breach incidents procedural guide

Entry into force of Implementing Regulation of the Personal Data Protection Law including cybersecurity regulation

Entry into force of Implementing Regulation of the Personal Data Protection Law

Entry into force of Regulations for transferring personal data outside the geographical borders of the Kingdom of Saudi Arabia

Implemented Personal Data Protection Law Amendments including data protection authority governance

Implemented Personal Data Protection Law Amendments including cross-border data transfer regulation

Implemented Personal Data Protection Law Amendments including data protection regulations

Published SDAIA Personal Data Destruction, Anonymisation, and Pseudonymisation Guideline

Published SDAIA Personal Data Processing Activities Records Guideline

Implemented SDAIA Guidelines for Binding Common Rules (BCR) for Personal Data Transfer

Implemented SDAIA Standard Contractual Clauses for Personal Data Transfer

Adopted Rules Governing the National Register of Controllers Processing Personal Data

Published SDAIA Elaboration and Developing Privacy Policy Guideline

Implemented SDAIA Minimum Personal Data Determination Guideline

Adopted SDAIA’s Rules for Appointing Personal Data Protection Officer

Postponed implementation of Personal Data Protection Law based on 2023 amendments

Closed consultation on Framework on Use of Secondary Data

Implemented Data and Privacy Regulatory Sandbox

Adopted Data Management and Personal Data Protection Standards

Adopted National Data Governance Policy including Cross-Border Data Transfer Regulation

Adopted National Data Governance Policy including Data Protection Regulation