Saudi Arabia: Authority for Data and Artificial Intelligence opened consultation on unified databases project for issuing accreditation certificates in personal data protection

On 11 December 2024, the Saudi Authority for Data and Artificial Intelligence (SDAIA) opened a public consultation on a regulatory framework for the issuance of accreditation certificates for personal data protection entities until 11 January 2025. The rules apply to government and private entities involved in personal data processing and seeking certification. They require adherence to the Personal Data Protection Law, implementation of technical, organisational, and administrative safeguards, and submission of supporting documentation. The certification process involves application submission, evaluation, and issuance of a compliance certificate.