Saudi Arabia: Adopted Personal Data Protection Law Amendments including data protection authority governance

On 21 March 2023, the Saudi Arabia Council of Ministers adopted the amendments to the Personal Data Protection Law of 2021. The amendment foresees the choice of a competent Authority through a resolution of the Council of Ministers. The Authority will enforce data protection law through binding and non-binding measures, monitor compliance with the Law, cooperate with other national and international authorities and ascertain violations of the Law. The Authority may also certify that entities process data in accordance with the Law. The Authority will have to issue the regulations mentioned in the Law no later than 180 days from the issuance date of the amended Law itself.