Data Monetization Policy (سياسة تحقيق الإيرادات من البيانات), v1.0 (2026), issued by SDAIA and announced on 19 June 2026. It is also referred to as the Data Revenue Generation Policy, and appears to bind the entities within its scope.
Scope: government data used for data products and services; data private entities obtain while working for government; and data obtained from a government entity by any means. Data classified Secret or above is excluded.
Rules: raw data may not be sold; government-to-government provision is free; open data stays free.
Registration and pricing: products must be registered in NDMO's national register; pricing is agreed with the Non-Oil Revenues Development Center and the Ministry of Finance.
Personal data: must be processed under the PDPL.
Proposed: SDAIA's draft amendments to the PDPL Implementing Regulation (IR) (consultation 6 October to 5 November 2026) add Art 23(2): 'The Controller shall store Personal Data within the Kingdom', with transfers still permitted under the Law. If adopted, this would apply to personal data in monetised data products and make any transfer abroad a registration trigger.
2026-06-19 · SDAIA issues Data Monetization Policy: SDAIA announced the Data Monetization Policy (سياسة تحقيق الإيرادات من البيانات), v1.0, also referred to as the Data Revenue Generation Policy. It covers government data used in data products and services, and data priva