Saudi Arabia: Implemented amendments to Regulation on Personal Data Transfer outside the Kingdom

On 1 September 2024, the amendments to the Regulation on Personal Data Transfer outside the Kingdom issued by the Saudi Arabia Authority for Data and Artificial Intelligence (SDAIA) entered into force after its publication in the official Gazette. The Regulation includes updates to definitions, general provisions for transferring personal data, procedures for assessing the level of protection in countries or international organisations, requirements for conducting risk assessments before transferring personal data, and conditions under which entities may be exempt from certain requirements when transferring personal data