Wadira: Find your way through Saudi data & privacy law.
Saudi regulatory frameworks
Constitutional foundation (7 instruments): The Basic Law of Governance and Sharia, plus the general laws that touch personal data: electronic transactions, e-commerce, evidence, civil transactions and cr
Personal Data Protection (PDPL) (23 instruments): Saudi Arabia's data-protection regime: the PDPL, its Implementing Regulation, and the rules and guidelines beneath them.
Data Management & Governance (13 instruments): Saudi Arabia's national data management and governance regime: the NDMO Standards, the National Data Governance policies (classification, sharing, freedom of in
Cybersecurity (39 instruments): The Anti-Cyber Crime Law and the National Cybersecurity Authority's controls and frameworks (ECC, CCC and more).
Financial services (24 instruments): Saudi Central Bank (SAMA) and Capital Market Authority (CMA) laws, frameworks and rules for banks, finance and payment companies, credit bureaus and Capital Mar
Artificial Intelligence (14 instruments): AI laws, policies and guidelines (SDAIA, CST, NCA). The only law is CST's draft Global AI Hub Law. Personal data in AI systems is governed by the PDPL and its I
Telecommunications & ICT (11 instruments): CST's telecom and ICT regime: the Telecommunications and IT Act and its Implementing Regulations, CST's Organisation, licensing, the CRF, and the spam, user rig
Cloud & Data Centres (6 instruments): CST's cloud and data centre regime: the Cloud Computing Services Provisioning Regulations v4, cloud provider classes and guides, the Data Centre Services Regula
Health data (8 instruments): Health data rules and standards from the Ministry of Health, the Saudi Health Council and NHIC, the SFDA and the National Committee of Bioethics. Health data is