Wadira: Find your way through Saudi data & privacy law.
Home › Frameworks › Financial services › SAMA 4725
| Type | Instrument |
|---|---|
| Issuing authority | Saudi Central Bank (SAMA) |
| Framework | Financial services |
| Tier | Rules, controls & standards |
| Legal status | Binding |
SAMA Circular No. 43045328 (19/5/1443H, December 2021) is the Saudi Central Bank's directive bringing the Personal Data Protection Law into its supervisory perimeter. Addressed to all financial institutions subject to SAMA supervision, its subject line is the PDPL (Royal Decree M/19, 9/2/1443H) together with the policies, controls and rules on data governance issued by SDAIA under Council of Ministers Resolution No. 292 (27/4/1441H).
Noting that some of those instruments bind its supervised institutions, SAMA directs each to:
1. Review its approved internal policies and procedures and confirm, or amend, their alignment with the PDPL within the statutory compliance period, and with the SDAIA/NDMO data-governance policies and controls (published at sdaia.gov.sa/ndmo). 2. Perform a gap analysis against the Law and those instruments, and set a board-approved, time-bound remediation plan.
The circular took effect from its date and was signed by the Deputy Governor for Supervision. It is the key bridge instrument between SDAIA's data regime and SAMA's financial-sector rulebook; the hosted document is the original Arabic circular.
Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13