Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Financial services › Implementing Regulations of the Credit Information Law

Implementing Regulations of the Credit Information Law

Operating rules for credit bureaus

Type	Implementing Regulation
Issuing authority	Saudi Central Bank (SAMA)
Framework	Financial services
Tier	Cabinet instruments: CoM Resolution
Legal status	In force
Instrument number	أق/13709 · Saudi Central Bank (SAMA)
Issued	(22/9/1432H)
Dates	No. أق/13709, 22/9/1432H; in force
Last verified	2026-10-20

The Implementing Regulations of the Credit Information Law (No. أق/13709, 22/9/1432H) set the operating rules for credit bureaus.

• In force.
• Credit bureaus must have their head office in the Kingdom.
• Bureaus must use systems approved by the Saudi Central Bank (SAMA).

Documents

• Official source (rulebook.sama.gov.sa)

In this framework

• The Capital Market Law
• Saudi Central Bank Law
• Law of Payments and Payment Services and its Implementing Regulation
• Credit Information Law
• Banking Control Law
• Payment Services Provider Regulations (2020)
• Capital Market Institutions Regulations
• SAMA Rules on Outsourcing (No. 41027017)
• Financial Consumer Protection Principles and Rules
• Cyber Resilience Fundamental Requirements (CRFR)
• Adherence to the PDPL and Data Governance Policies, Regulations and Rules (SAMA No. 43045328)
• SAMA Cyber Security Framework (CSF)
• Business Continuity Management Framework
• Counter-Fraud Framework (banks)
• Counter-Fraud Fundamental Requirements (finance and payment companies)
• Enhancement of Operational Resilience to Address Quantum Computing Risks
• Oversight Framework for Payment Systems and Their Operators
• Open Banking Framework
• IT Governance Framework
• Cyber Threat Intelligence Principles
• Ethical Red Teaming Framework
• CMA Cybersecurity Guidelines for Capital Market Institutions
• Payment Services Provider Regulatory Guidelines

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21