Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Data Management & Governance › Data Sharing Policy

Data Sharing Policy

Type	Instrument
Issuing authority	Saudi Data & AI Authority / National Data Management Office (SDAIA / NDMO)
Framework	Data Management & Governance
Tier	Implementing & executive regulation
Legal status	In force
Instrument number	NDMO (SDAIA)
Version	2.0
Dates	Policy, v2.0 (2024). Binding on government entities.
Last verified	2026-10-20

NDMO Data Sharing Policy, v2.0 (2024). It governs how government entities share their data with requesters, in mandatory terms, and binds government entities.

• Eight principles, including single source of truth, legitimate purpose, authorised access and data security.
• The General Rules for Secondary Use of Data and the Data Monetization Policy build on it.
• Proposed: SDAIA's draft amendments to the PDPL Implementing Regulation (IR) (consultation 6 October to 5 November 2026) add Art 23(2): 'The Controller shall store Personal Data within the Kingdom', with transfers still permitted under the Law. If adopted, this would sit beside the classification-based hosting rules for government data, apply to personal data in shared data, and make any transfer abroad a registration trigger.

Documents

• Hosted official text (PDF, English)
• Official source (sdaia.gov.sa)

In this framework

• SDAIA Organizational Arrangements
• NDMO Data Management & Personal Data Protection Standards
• Freedom of Information Policy
• National Data Governance Interim Regulations
• Data Classification Policy
• Open Data Policy
• Data Monetization Policy
• National Data Index (NDI)
• NDI: Operational Excellence (OE)
• General Rules for Secondary Use of Data
• NDI: Operational Excellence FAQs
• Data Regulatory Sandbox

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21