Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Constitutional foundation › E-Commerce Law

E-Commerce Law

Duties of e-commerce providers, including customer data

Type	Law
Framework	Constitutional foundation
Tier	Primary law: niẓām (Royal Decree M/…)
Legal status	In force
Instrument number	M/126 · Royal Decree
Issued	(7/11/1440H)
Dates	Royal Decree M/126 (7/11/1440H); date to be confirmed against the official text
Last verified	2026-10-20

The E-Commerce Law sets duties for e-commerce service providers, including on disclosure and on customers' personal data. It is reported as Royal Decree M/126 (7/11/1440H); the date is being checked against the official text. The Ministry of Commerce administers it.

• E-commerce providers are responsible for protecting the personal data of their customers.
• Applies alongside the PDPL and the NCA's e-commerce cybersecurity guidelines.

In this framework

• Basic Law of Governance (Arts 37 & 40)
• Sharia (Qur'an & Sunnah)
• Electronic Transactions Law
• Evidence Law
• Civil Transactions Law
• Law of Criminal Procedure

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21