Data Management & Governance

Saudi Arabia's national data management and governance regime: the NDMO Standards, the National Data Governance policies (classification, sharing, freedom of information, open data), the Data Monetization Policy, the General Rules for Secondary Use of Data, the National Data Index and the Data Regulatory Sandbox.

13 instruments in this framework.

Cabinet instruments: CoM Resolution

SDAIA Organizational Arrangements · CoM Resolution 292 (27/4/1441H), amended by 195 (15/3/1444H), under Royal Order A/471 (29/

Implementing & executive regulation

Data Sharing Policy · Policy, v2.0 (2024). Binding on government entities.
NDMO Data Management & Personal Data Protection Standards · Version 1.5 (document control June 2021). Mandatory for government entities.
Freedom of Information Policy · Policy, Section 4 of the National Data Governance Policies (v1, 5 May 2020).
National Data Governance Interim Regulations · Policies v1, 5 May 2020. Personal data parts overtaken in practice by the PDPL.
Data Classification Policy · Policy, part of the National Data Governance Policies (v1, 5 May 2020).
Open Data Policy · Policy, Section 5 of the National Data Governance Policies (v1, 5 May 2020).
Data Monetization Policy · Policy, v1.0 (2026), announced 19 June 2026.

Rules, controls & standards

National Data Index (NDI) · Third measurement cycle launched December 2025 (214 entities).
NDI: Operational Excellence (OE)
General Rules for Secondary Use of Data · Issue 1.0. SDAIA Board Decision No. 22-1 (11/06/1447H, 2 December 2025).
NDI: Operational Excellence FAQs · FAQ handbook, version 5.0 (October 2025). Introduces no new obligations.

Guidelines & circulars

Data Regulatory Sandbox · Personal data protection track open for registration from 6 October 2026 (two months).

Related instruments

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21