Saudi Arabia: Implemented Cloud Computing Services Provisioning Regulations including data localisation requirement

On 10 October 2023, the Communications, Space & Technology Commission of Saudi Arabia (CST) implemented its Cloud Computing Services Provisioning Regulations. The regulations apply to cloud computing services provided in the Kingdom. The regulations set out a number of obligations, including a data localisation requirement, according to which registered cloud service providers and cloud computing subscribers may not transfer content of government agency data outside the Kingdom for any purposes, unless expressly permitted by law or regulation.