Saudi Arabia: Closed consultation on Framework on Use of Secondary Data

On 9 February 2023, the public consultation on the draft Framework on the Use of Secondary Data issued by the Saudi Authority for Data and Artificial Intelligence (SDAA) closed. The Framework outlines the principles that entities are required to follow in order to enter into an agreement for transmitting data. The principles include data quality, transparency, ethical use of data, purpose and accountability and anonymity. The SDAA also elaborates on specific data-sharing procedures, which include management standards, roles, and responsibilities of the data management team, as well as follow-up protocols. Finally, the Framework specifies that entities can share personal data only if they have obtained the individual's explicit consent and anonymised it before using it for secondary purposes.