Saudi Arabia: Postponed implementation of Personal Data Protection Law based on 2023 amendments
Description
Postponed implementation of Personal Data Protection Law based on 2023 amendments
On 21 March 2023, the Council of Ministers of Saudi Arabia adopted the amendments to the Personal Data Protection Law (PDPL), postponing the implementation of the Law to 14 September 2024. The amended version of the PDPL will enter into force with a grace period on 14 September 2023. In particular, the amended PDPL changes the provisions regarding the legal basis for processing personal data, obligations for reporting data breaches and conditions under which the transfer of personal data would be allowed.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2021-09-14
adopted
2021-09-16
in grace period
2022-03-22
adopted