Saudi Arabia: Closed consultation on draft amendments to the regulations on transferring personal data outside the Kingdom

On 18 April 2024, the Authority for Data and Artificial Intelligence closed the public consultation on the draft amendments to the regulation on the transfer of personal data outside the geographical borders of the Kingdom of Saudi Arabia (KSA). The proposed draft amendments aim to clarify the regulations concerning the transfer of personal data outside the Kingdom. In particular, the amendments include updates to definitions, general provisions for transferring personal data, procedures for assessing the level of protection in countries or international organisations, conditions under which entities may be exempt from certain requirements when transferring personal data and requirements for conducting risk assessments before transferring personal data.