Saudi Arabia: Opened consultation on Personal Data Protection Law Amendments including data protection authority governance

On 20 November 2022, the Saudi Authority for Data and Artificial Intelligence released a draft amendment to the Personal Data Protection Law of 2021 and opened a public consultation until 20 December 2022. The amendment foresees the choice of a competent Authority through a resolution of the Council of Ministers. The Authority would enforce data protection law through binding and non-binding measures, monitor compliance with the Law, cooperate with other national and international authorities and ascertain violations of the Law. The Authority may also certify that entities process data in accordance with the Law. The Authority would have to issue the regulations mentioned in the Law no later than 180 days from the issuance date of the amended Law itself.