Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Financial services › Open Banking Framework

Open Banking Framework

Account information (Release 1) and payment initiation (Release 2)

Type	Framework
Issuing authority	Saudi Central Bank (SAMA)
Framework	Financial services
Tier	Rules, controls & standards
Legal status	In force
Instrument number	Saudi Central Bank (SAMA)
Version	Release 2
Dates	Release 1 (2022); Release 2 (2 September 2024); licensing from 26 March 2026
Last verified	2026-10-20

The Saudi Central Bank (SAMA) Open Banking Framework sets the rules for sharing customer account data and initiating payments through third parties.

• Release 1 (2022): account information services (AIS).
• Release 2 (2 September 2024): payment initiation services (PIS).
• Licensing: SAMA began licensing open banking providers on 26 March 2026.
• Customer account data shared under the Framework is personal data under the PDPL.

Documents

• Official source (www.spa.gov.sa)

Updates for this instrument

• 2026-03-26 · SAMA begins open banking licensing: The Saudi Central Bank (SAMA) began licensing open banking providers on 26 March 2026, under the Open Banking Framework (Release 1 account information, 2022; Release 2 payment initiation, 2 September 2024).

In this framework

• The Capital Market Law
• Saudi Central Bank Law
• Law of Payments and Payment Services and its Implementing Regulation
• Credit Information Law
• Banking Control Law
• Implementing Regulations of the Credit Information Law
• Payment Services Provider Regulations (2020)
• Capital Market Institutions Regulations
• SAMA Rules on Outsourcing (No. 41027017)
• Financial Consumer Protection Principles and Rules
• Cyber Resilience Fundamental Requirements (CRFR)
• Adherence to the PDPL and Data Governance Policies, Regulations and Rules (SAMA No. 43045328)
• SAMA Cyber Security Framework (CSF)
• Business Continuity Management Framework
• Counter-Fraud Framework (banks)
• Counter-Fraud Fundamental Requirements (finance and payment companies)
• Enhancement of Operational Resilience to Address Quantum Computing Risks
• Oversight Framework for Payment Systems and Their Operators
• IT Governance Framework
• Cyber Threat Intelligence Principles
• Ethical Red Teaming Framework
• CMA Cybersecurity Guidelines for Capital Market Institutions
• Payment Services Provider Regulatory Guidelines

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21