Saudi Arabia: Opened consultation on SDAIA guide on preparation of binding common rules for transfer of personal data

Description

Opened consultation on SDAIA guide on preparation of binding common rules for transfer of personal data

On 15 August 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) opened a public consultation on the guide to the preparation of binding common rules for the transfer of personal data until 30 August 2024. The guide clarifies the obligations of entities transferring personal data outside Saudi Arabia to entities in countries or international organisations not recognised for providing an adequate level of personal data protection. The initiative is grounded in the Personal Data Protection Law, as amended by Royal Decrees No. (M/19) and No. (M/148), and aims to ensure that the protection afforded to personal data transferred internationally meets or exceeds the standards set within the Kingdom. The guide outlines the process for creating Binding Common Rules (BCR) for controllers or processors involved in such data transfers, providing instructions for entities operating both within and outside Saudi Arabia on developing these BCRs to comply with the Transfer Regulation and the Personal Data Protection Law.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2024-08-15
in consultation

On 15 August 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) opened a public…

2024-08-30
processing consultation

On 30 August 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) closes the publ…

2024-09-02
in force

On 2 September 2024, the Guidelines for Binding Common Rules (BCR) for Personal Data Transfer issue…