Wadira — Find your way through Saudi data & privacy law.

Source documents library

86 hosted primary-source documents.

AI Adoption Framework (English)
AI Ethics Principles (English)
Alignment Guide for the Saudi Cybersecurity Higher Education Framework (SCyber-Edu) (English)
Alignment Guide for the Saudi Cybersecurity Workforce Framework (SCyWF) (English)
Anti-Cyber Crime Law (English) · Arabic
Basic Law of Governance (Arts 37 & 40) (English)
Binding Common Rules (BCRs) (English)
Cloud Computing Regulatory Framework (English)
Cloud Cybersecurity Controls (CCC-2:2024) (English)
CMA Cybersecurity Guidelines for Capital Market Institutions (English)
Committee Working Rules (English)
Critical Systems Cybersecurity Controls (English)
CST Guide for Cloud Computing Service Providers (English)
Cyber Resilience Fundamental Requirements (CRFR) (English)
Cybersecurity Guidelines for E-commerce Consumers (CGEC-1:2019) (English)
Cybersecurity Guidelines for E-commerce Service Providers (CGESP-1:2019) (English)
Cybersecurity Guidelines for Internet of Things (CGIoT-1:2024) (English)
Cybersecurity Organizational Structure Template (English)
Cybersecurity Regulatory Framework (CRF) for the ICT Sector (English)
Data Classification Policy (English)
Data Cybersecurity Controls (English)
Data Monetisation Policy (English)
Data Sharing Guideline (English)
Deepfakes Guidelines (English)
Destruction / Anonymisation / Pseudonymisation Guideline (English)
Essential Cybersecurity Controls (ECC-2:2024) (English)
Financial Consumer Protection Principles and Rules (English)
Freedom of Information Policy (English)
Generative AI Guidelines — Government & Public (English)
Generative AI Guidelines — Public (English)
Guide to Cloud Cybersecurity Controls (CCC) Implementation (English)
Guide to Critical Systems Cybersecurity Controls (CSCC) Implementation (English)
Guide to Data Cybersecurity Controls (DCC) Implementation (English)
Guide to Operational Technology Cybersecurity Controls (OTCC) Implementation (English)
Guide to Organizations’ Social Media Accounts Cybersecurity Controls (OSMACC) Implementation (English)
Guide to Telework Cybersecurity Controls (TCC) Implementation (English)
Guide to the Saudi PDPL for Controllers and Processors (English)
Implementing (Executive) Regulation (English)
Minimum Personal Data Guideline (English)
MOH Data Governance Policy (English)
National Cryptographic Standards (English)
National Data Index (NDI) (English)
National Occupational Standard Framework for Data & AI (English)
National Policy for Managed Security Operations Centres (NPMSOC-1:2024) (English)
NCA Cybersecurity Toolkits (English)
NDI — Operational Excellence (OE) (English)
NDI — Operational Excellence FAQs (English)
NDMO Data Management & Personal Data Protection Standards (English)
Non-Critical National Infrastructure Cybersecurity Controls (NCNICC-1:2025) (English) (unofficial translation) · Arabic
Open Data Policy (English)
Operational Technology Cybersecurity Controls (English)
Operational Technology Cybersecurity Controls — Methodology & Mapping Annex (English)
Organizations’ Social Media Accounts Cybersecurity Controls (OSMACC-1:2021) (English)
PAYMENT SERVICES PROVIDER REGULATIONS (English)
Payment Services Provider Regulatory Guidelines (English)
Personal Data Breach Incidents Procedural Guide (English)
Personal Data Disclosure Guideline (English)
Personal Data Protection Law (PDPL) (English)
Privacy Policy (Notice) Guideline (English)
Records of Processing (RoPA) Guideline (English)
Registration Guide in the Qualifying Category (English)
Regulation on Personal Data Transfer Outside KSA (English)
Regulations Documents (English)
Regulatory Framework for Licensing Managed Security Operations Centre Services (RFMSOC-1:2024) (English)
Rules for Appointing a DPO (English)
Rules for Auditing & Inspecting Controllers and Processors (English)
Rules for Secondary Use of Data (English)
Rules Governing Issuance of Accreditation Certificates (English)
Rules Governing the National Register of Controllers (English)
SAMA 4725 (English)
SAMA Cyber Security Framework (CSF) (English)
SAMA Rules on Outsourcing (Circular 2389) (English)
Saudi Academic Framework for AI Qualifications (English)
Saudi Central Bank Law (English)
Saudi Cybersecurity Higher Education Framework (SCyber-Edu-1:2020) (English)
Saudi Cybersecurity Workforce Framework (SCyWF-1:2020) (English)
Saudi Health Information Exchange Policies (IS0303 v1.0) (English)
SDAIA Organizational Arrangements (English) (unofficial translation) · Arabic
Standard Contractual Clauses (SCCs) (English)
Summary of Draft Amendments to the PDPL Implementing Regulation (EN) (English)
Telework Cybersecurity Controls (TCC) (English)
The Capital Market Law (English)
Transfer to Non-Adequate Country Guideline (English)

Content and register data licensed CC BY 4.0 — cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-07-27