Saudi Arabia: Adopted Guideline for Personal Data Disclosure Cases

On 1 August 2024, the Saudi Data & AI Authority (SDAIA) adopted guidelines aimed at assisting entities in understanding their obligations under the Personal Data Protection Law and its Implementing Regulations. These guidelines outline the permissible cases and restrictions for personal data disclosure, emphasising the need for consent, public interest, and the protection of individual privacy. The document serves as a non-binding reference to aid entities in compliance, encouraging best practices in data disclosure while safeguarding the privacy of data subjects across various sectors.