M/17 · Royal Decree M/17 (Council of Ministers Resolution 79)
Issued
2007-03-26 (8/3/1428H)
Dates
Royal Decree M/17 dated 8/3/1428H (26 March 2007)
Last verified
2026-10-20
The Anti-Cyber Crime Law defines computer-related offences and their penalties. It is not an NCA instrument.
Issued: Royal Decree M/17 dated 8/3/1428H (26 March 2007), approving Council of Ministers Resolution 79. In force 120 days after publication in the Official Gazette (Art 16).
Enforcement: the Public Prosecution investigates and prosecutes (Art 15); CST (formerly CITC) gives technical support (Art 14). The NCA has no statutory role under this Law.
Art 3: offences include unlawful interception (Art 3(1)) and invading privacy by misusing camera-equipped mobile phones (Art 3(4)); up to 1 year and/or SAR 500,000.
Art 5: unlawful access to delete, leak or alter data; up to 4 years and/or SAR 3m.
Art 6: content offences, including those affecting privacy; up to 5 years and/or SAR 3m.
Art 7: terrorism and state-security offences; up to 10 years and/or SAR 5m. Art 8 lists aggravating factors.
Amendments: no amendment in force found as of 20 October 2026.