Saudi Arabia: Saudi Data and AI Authority closes consultation on rules governing the issuance of accreditation certificates in personal data protection

On 11 January 2025, the Saudi Data and AI Authority (SDAIA) closes its public consultation on a regulatory framework for the issuance of accreditation certificates for personal data processing entities. The rules apply to government and private entities involved in personal data processing and seeking certification. They require adherence to the Personal Data Protection Law, implementation of technical, organisational, and administrative safeguards, and submission of supporting documentation. The certification process involves application submission, evaluation, and issuance of a compliance certificate.