Saudi Arabia: Implemented Personal Data Protection Law Amendments including data protection authority governance

On 14 September 2024, the Amended Personal Data Protection Law is implemented. The amendment foresees the choice of a competent Authority through a resolution of the Council of Ministers. The Authority will enforce data protection law through binding and non-binding measures, monitor compliance with the Law, cooperate with other national and international authorities and ascertain violations of the Law. The Authority may also certify that entities process data in accordance with the Law. The Authority will have to issue the regulations mentioned in the Law no later than 180 days from the issuance date of the amended Law itself.