Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Financial services › Oversight Framework for Payment Systems and Their Operators

Oversight Framework for Payment Systems and Their Operators

SAMA oversight of payment systems

Type	Framework
Issuing authority	Saudi Central Bank (SAMA)
Framework	Financial services
Tier	Rules, controls & standards
Legal status	In force
Instrument number	472047719 · Saudi Central Bank (SAMA)
Issued	2026-03-08
Dates	Circular 472047719, 8 March 2026 (reported)
Last verified	2026-10-20

The Saudi Central Bank (SAMA) Oversight Framework for Payment Systems and Their Operators sets how SAMA oversees payment systems. Details are from secondary sources.

• Reported as circular 472047719, dated 8 March 2026.
• Applies to payment systems and their operators.

Updates for this instrument

• 2026-03-08 · SAMA Oversight Framework for Payment Systems and Their Operators: The Saudi Central Bank (SAMA) reportedly issued its Oversight Framework for Payment Systems and Their Operators by circular 472047719 on 8 March 2026.

In this framework

• The Capital Market Law
• Saudi Central Bank Law
• Law of Payments and Payment Services and its Implementing Regulation
• Credit Information Law
• Banking Control Law
• Implementing Regulations of the Credit Information Law
• Payment Services Provider Regulations (2020)
• Capital Market Institutions Regulations
• SAMA Rules on Outsourcing (No. 41027017)
• Financial Consumer Protection Principles and Rules
• Cyber Resilience Fundamental Requirements (CRFR)
• Adherence to the PDPL and Data Governance Policies, Regulations and Rules (SAMA No. 43045328)
• SAMA Cyber Security Framework (CSF)
• Business Continuity Management Framework
• Counter-Fraud Framework (banks)
• Counter-Fraud Fundamental Requirements (finance and payment companies)
• Enhancement of Operational Resilience to Address Quantum Computing Risks
• Open Banking Framework
• IT Governance Framework
• Cyber Threat Intelligence Principles
• Ethical Red Teaming Framework
• CMA Cybersecurity Guidelines for Capital Market Institutions
• Payment Services Provider Regulatory Guidelines

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21