Saudi Arabia Issues Personal Data Protection Law – Lexology

Saudi Arabia


September 26 2021



Saudi Arabia has issued its first complete nationwide information safety legislation to manage the gathering and processing of non-public info. On this article we contemplate the implications of this essential growth for organisations working within the Kingdom.

What's the new legislation?

The Private Knowledge Safety Regulation (PDPL) was applied by Royal Decree M/19 of 9/2/1443H (16 September 2021) approving Decision No. 98 dated 7/2/1443H (14 September 2021). It was revealed within the Official Gazette on 24 September 2021.

The Saudi Knowledge & Synthetic Intelligence Authority (SDAIA) will supervise the implementation of the brand new laws for the primary two years, following which a switch of supervision to the Nationwide Knowledge Administration Workplace (NDMO) can be thought of. The NDMO is the regulatory arm of SDAIA and had beforehand revealed interim information governance laws in 2020, which we assume have now been outmoded by the PDPL insofar as they relate to private information safety.

Based on SDAIA’s announcement, the PDPL is meant to make sure the privateness of non-public information, regulate information sharing and forestall the abuse of non-public information in step with the objectives of the Kingdom’s Imaginative and prescient 2030 to develop a digital infrastructure and assist innovation to develop a digital financial system.

Who and what's inside the scope of the PDPL?

The PDPL is designed to guard “private information”, i.e. any info, in no matter type, via which an individual could also be straight or not directly recognized.

 » Read more from www.lexology.com