Saudi Arabia: Opened consultation on SDAIA's draft Standard Contractual Clauses for Transfer of Personal Data

On 15 August 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) initiated a public consultation regarding the standard contractual clauses for the transfer of personal data until 30 August 2024. The standard contractual clauses are based on the Personal Data Protection Law, as amended, and the Regulation on the Transfer of Personal Data Outside the Kingdom. The standard contractual clauses aim to ensure an equivalent level of personal data protection when transferring data outside Saudi Arabia to countries or international organisations lacking an appropriate level of protection. The draft includes 4 templates for use between controllers or processors for transfer transfers, specifying obligations to maintain the protection level required under the Law and Regulations. The consultation aims to gather information on these clauses, which also outline the conditions under which personal data may be transferred, the roles of the parties involved, and the enforcement mechanisms to ensure compliance with the Kingdom's jurisdiction and legal framework.