Saudi Arabia: Closed consultation on Personal Data Protection Law Amendments including cross-border data transfer regulation

On 20 December 2022, the Saudi Authority for Data and Artificial Intelligence closed the public consultation on its draft amendment to the Personal Data Protection Law of 2021. Under this amendment, the transfer of data outside Saudi Arabia would be allowed as long as the data protection standards in the other jurisdiction are equal or higher to those applicable in Saudi Arabia. Furthermore, the draft amendment specifies that the data authority will adopt evaluation criteria and notes that entities transferring data outside the country will have to ensure that they are sending the minimum amount of personal data required.