Description

Closed consultation on SDAIA's draft Standard Contractual Clauses for Transfer of Personal Data

On 30 August 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) closes the public consultation on the draft standard contractual clauses for the transfer of personal data. The standard contractual clauses are based on the Personal Data Protection Law, as amended, and the Regulation on the Transfer of Personal Data Outside the Kingdom. The standard contractual clauses aim to ensure an equivalent level of personal data protection when transferring data outside Saudi Arabia to countries or international organisations lacking an appropriate level of protection. The draft includes 4 templates for use between controllers or processors for transfer transfers, specifying obligations to maintain the protection level required under the Law and Regulations. The consultation aims to gather information on these clauses, which also outline the conditions under which personal data may be transferred, the roles of the parties involved, and the enforcement mechanisms to ensure compliance with the Kingdom's jurisdiction and legal framework.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2024-08-15
in consultation

On 15 August 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) initiated a pub…

2024-08-30
processing consultation

On 30 August 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) closes the publ…

2024-09-02
in force

On 2 September 2024, the Standard Contractual Clauses For Personal Data Transfer issued by the Saud…