Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Telecommunications & ICT › Implementing Regulations of the Telecommunications and IT Act

Implementing Regulations of the Telecommunications and IT Act

MCIT Ministerial Decision 13; user data, CST data requests, marketing controls

Type	Implementing Regulation
Issuing authority	Communications, Space & Technology Commission (CST)
Framework	Telecommunications & ICT
Tier	Cabinet instruments: CoM Resolution
Legal status	In force
Instrument number	Ministerial Decision 13 · Ministry of Communications and Information Technology
Issued	(14/05/1444H)
Dates	MCIT Ministerial Decision 13 (14/05/1444H); Umm Al-Qura 16 December 2022
Last verified	2026-10-20

The Implementing Regulations of the Telecommunications and IT Act were issued by MCIT Ministerial Decision 13 (14/05/1444H) and published in Umm Al-Qura on 16 December 2022. CST applies them.

• Art 58: user consent is needed to collect or disclose user data.
• Arts 2–3: CST's power to request data from service providers.
• Art 61(2): retention of data.
• Art 79(1)(f): controls on marketing communications, the link to CST's Spam Regulations.
• Art 81: inspection by CST.
• Licence and registration categories and procedures sit here; activity-specific regulations (cloud, data centres, digital content) build on them.

Documents

• Official source (www.uqn.gov.sa)

In this framework

• Telecommunications and Information Technology Act
• Organisation of the Communications, Space and Technology Commission (as amended)
• Regulations for Curbing Spam Messages and Calls (RC01 v3)
• Regulations of User Rights Protection Rules
• Regulations for Providing Digital Content Platform Services
• Internet of Things Regulations (RT18 v3)
• Telecom Infrastructure Risk Management Regulations (v2)
• Space Sector Regulations and Guidelines (draft)
• CST licensing and registration (index)
• Cybersecurity Regulatory Framework (CRF) for ICT Service Providers (Second Version)

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21