Wadira: Find your way through Saudi data & privacy law.
The CMA binds Capital Market Institutions (~188), not Tadawul-listed issuers. Its cybersecurity guidelines are non-binding but examined at licensing. Notable requirements:
Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13