Data Privacy Hub
Legal News

Saudi Arabia’s Personal Data Protection Law

Apr 1, 2022
min read

Saudi Arabia’s first data protection law (PDPL) will take effect on March 17, 2023. The aim of the PDPL is to ensure the privacy of personal data, regulate data sharing, and prevent the abuse of personal data. The PDPL covers data minimization, controller obligations, data subject rights, and penalties for breach of provisions. 

Scope:

The PDPL applies to any processing by businesses of personal data performed in the Kingdom of Saudi Arabia, including the processing of personal data of KSA residents by entities outside the Kingdom.

The full guidelines can be found
here