Digital Policy Alert logo

Saudi Arabia: Implemented Personal Data Protection Law Amendments including cross-border data transfer regulation

Policy overview

Description

Implemented Personal Data Protection Law Amendments including cross-border data transfer regulation

On 14 September 2024, the Amended Personal Data Protection Law is implemented. Firstly, the Law stipulated that the transfer of data would be allowed to other jurisdictions if it does not prejudice the Kingdom's national security. Secondly, the tra…

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2022-11-20
in consultation

On 20 November 2022, the Saudi Authority for Data and Artificial Intelligence released a draft amen…

2022-12-20
in consultation

On 20 December 2022, the Saudi Authority for Data and Artificial Intelligence closed the public con…

2023-03-21
adopted

On 21 March 2023, the Saudi Arabia Council of Ministers adopted the amendments to the Personal Data…

2023-09-14
in grace period

On 14 September 2023, the Personal Data Protection Law Amendments entered into force with a grace p…

2024-09-14
in force

On 14 September 2024, the Amended Personal Data Protection Law is implemented. Firstly, the Law sti…