Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Telecommunications & ICT › Internet of Things Regulations (RT18 v3)

Internet of Things Regulations (RT18 v3)

CST rules for IoT services and devices

Type	Regulation
Code	RT18
Issuing authority	Communications, Space & Technology Commission (CST)
Framework	Telecommunications & ICT
Tier	Implementing & executive regulation
Legal status	In force
Instrument number	CST decision 556/1446 · Communications, Space and Technology Commission
Issued	2024-07-31
Version	3
Dates	CST decision 556/1446, 31 July 2024; in force
Last verified	2026-10-20

CST's IoT Regulations govern the provision of Internet of Things services in the Kingdom.

• Issued by CST decision 556/1446 on 31 July 2024 (RT18, version 3); in force.
• Data residency not confirmed: one secondary source says IoT data must stay in the Kingdom; the published text summary is silent. Check the text before relying on either view.

Documents

• Official source (www.cst.gov.sa)

In this framework

• Telecommunications and Information Technology Act
• Organisation of the Communications, Space and Technology Commission (as amended)
• Implementing Regulations of the Telecommunications and IT Act
• Regulations for Curbing Spam Messages and Calls (RC01 v3)
• Regulations of User Rights Protection Rules
• Regulations for Providing Digital Content Platform Services
• Telecom Infrastructure Risk Management Regulations (v2)
• Space Sector Regulations and Guidelines (draft)
• CST licensing and registration (index)
• Cybersecurity Regulatory Framework (CRF) for ICT Service Providers (Second Version)

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21