Saudi Press

Saudi Arabia and the world
Wednesday, Jul 09, 2025

New Personal Data Protection Law in Saudi Arabia

New Personal Data Protection Law in Saudi Arabia

A new Personal Data Protection Law ("PDP Law"), promulgated by Royal Decree M/19 of 9/2/1443H, corresponding to 16 September 2021, is due to come into force in the Kingdom from 23 March 2022 (the "Effective Date") and will require most businesses to make significant changes to the way they collect, store and process personal data. Businesses will also need to establish compliant procedures and policies and to stop certain practices.
The PDP Law applies to the processing of personal data related to individuals that takes place in the Kingdom, including processing of personal data of KSA residents by any party outside the Kingdom. "Processing" for these purposes includes collection of, storing, modifying, using, disclosing, transferring, blocking and destroying personal data.

The main obligations under the PDP Law apply to any public entity, business or individual that specifies the purpose and manner of processing personal data (the "Controlling Party"), whether that party processes it by themselves or has it processed by others. The Controlling Party is distinguished from the "Processing Party", which includes any public entity, business, or individual that processes personal data for the Controlling Party.

As an example of the distinction, if a company asks another company (the "Payroll Provider") to pay the wages of its employees, tells the Payroll Provider when the wages should be paid, and provides the Payroll Provider with all relevant details, then the first company is the Controlling Party and the Payroll Provider is the Processing Party. Processing of personal data by individuals for purposes that do not exceed personal or family use is excluded from the scope of the PDP Law.

Controlling Parties must register with the responsible authority (initially the Saudi Data and Artificial Intelligence Authority (SDAIA)). Personal data owners' rights to access, to seek correction of and require destruction of their personal data must be respected and they must be informed of the grounds, purpose and other aspects of the processing of their personal data. The Controlling Party must adopt a personal data privacy policy and keep records of processing, minimise data collected and report data breaches. Entities outside the Kingdom that are subject to the PDP Law must appoint a representative in the Kingdom (although the authority may defer this obligation for up to five years).

Processing will generally require the consent of the personal data owner unless it relates to the implementation of an agreement with the personal data owner, or to a specific interest of the personal data owner, where it is impossible or difficult to contact them.

The Controlling Party may not transfer personal data outside the Kingdom or disclose it to a party outside the Kingdom, other than in implementation of a convention to which the Kingdom is a party, to serve the interests of the Kingdom, to preserve the life of the personal data owner (or their vital interests), or to prevent, examine or treat an infection.

The Executive Regulations, which must be issued by the Effective Date, will specify important details regarding the new regime, and could in certain areas introduce further exceptions to the restrictions contained in the PDP Law, including other circumstances in which personal data can be transferred outside the Kingdom.

Controlling Parties have one year from the Effective Date to comply with the PDP Law.
Newsletter

Related Articles

Saudi Press
0:00
0:00
Close
BRICS Expands Membership with Indonesia and Ten New Partner Countries
Elon Musk Founds a Party Following a Poll on X: "You Wanted It – You Got It!"
AI Raises Alarms Over Long-Term Job Security
Saudi Arabia Maintains Ties with Iran Despite Israel Conflict
Russia Formally Recognizes Taliban Government in Afghanistan
Mediators Edge Closer to Israel-Hamas Ceasefire Agreement
Emirates Airline Expands Market Share with New $20 Million Campaign
House Oversight Committee Subpoenas Former Jill Biden Aide Amid Investigation into Alleged Concealment of President Biden's Cognitive Health
Amazon Reaches Major Automation Milestone with Over One Million Robots
Meta Announces Formation of Ambitious AI Unit, Meta Superintelligence Labs
China Unveils Miniature Insect-Like Surveillance Drone
Marc Marquez Claims Victory at Dutch Grand Prix Amidst Family Misfortune
Iran Executes Alleged Israeli Spies and Arrests Hundreds Amid Post-War Crackdown
Trump Asserts Readiness for Further Strikes on Iran Amid Nuclear Tensions
Iran's Parliament Votes to Suspend Cooperation with Nuclear Watchdog
Trump Announces Upcoming US-Iran Meeting Amid Controversial Airstrikes
Trump Moves to Reshape Middle East Following Israel-Iran Conflict
NATO Leaders Endorse Plan for Increased Defence Spending
U.S. Crude Oil Prices Drop Below $65 Amid Market Volatility
Explosions Rock Doha as Iranian Missiles Target Qatar
“You Have 12 Hours to Flee”: Israeli Threat Campaign Targets Surviving Iranian Officials
Oman Set to Introduce Personal Income Tax, First in Gulf
Germany and Italy Under Pressure to Repatriate $245bn of Gold from US Vaults
Iran Intensifies Crackdown on Alleged Mossad Operatives After Sabotage Claims
Trump Praises Iran’s ‘Very Weak’ Response After U.S. Strikes and Presses Israel to Pursue Peace
WATCH: Israeli forces show the aftermath of a massive airstrike at Iran's Isfahan nuclear site
We have new information and breaking details to share about what is shaping up to be a historic air campaign tonight
Six Massive Bombs Dropped on Fordow; Trump: 'A Historic Moment for the U.S., Israel, and the World'
Fordow: Deeply Buried Iranian Enrichment Site in U.S.–Israel Crosshairs
United States Conducts Precision Strikes on Iran’s Nuclear Sites
US strikes Iran nuclear sites, Trump says
Pakistan to nominate Trump for Nobel Peace Prize.
Israel Confirms Assassination of Quds Force Commander in Tehran
16 Billion Login Credentials Leaked in Unprecedented Cybersecurity Breach
Senate hearing on who was 'really running' Biden White House kicks off
G7 Leaders Fail to Reach Consensus on Key Global Issues
Mass exodus in Tehran as millions try to flee following Trump’s evacuation order
Iranian Military Officers Reportedly Seek Contact with Reza Pahlavi, Signal Intent to Defect
Vietnam Emerges as Luxury Yacht Destination for Ultra‑Rich
China's Iranian Oil Imports Face Disruption Amid Escalating Middle East Tensions
Trump Demands Iran's Unconditional Surrender Amid Escalating Conflict
Israeli Airstrike Targets Iranian State TV in Central Tehran
President Trump is leaving the G7 summit early and has ordered the National Security Council to the Situation Room
Netanyahu Signals Potential Regime Change in Iran
Analysts Warn Iran May Resort to Unconventional Warfare
Iranian Regime Faces Existential Threat Amid Conflict
Energy Infrastructure Becomes War Zone in Middle East
Iran Conducts Ballistic Missile Launches Amid Heightened Tensions with Israel
Iran Signals Openness to Nuclear Negotiations Amid Ongoing Regional Tensions
Shock Within Iran’s Leadership: Khamenei’s Failed Plan to Launch 1,000 Missiles Against Israel
×