Saudi Arabia: Authority for Data and Artificial Intelligence closes consultation on unified databases project for issuing accreditation certificates in personal data protection

On 11 January 2025, the Saudi Authority for Data and Artificial Intelligence (SDAIA) closes its public consultation on a regulatory framework for the issuance of accreditation certificates for personal data processing entities. The rules apply to government and private entities involved in personal data processing and seeking certification. They require adherence to the Personal Data Protection Law, implementation of technical, organisational, and administrative safeguards, and submission of supporting documentation. The certification process involves application submission, evaluation, and issuance of a compliance certificate.