Wadira: Find your way through Saudi data & privacy law.

Home › Guide › The PDPL Instrument Family

The PDPL Instrument Family

The complete PDPL set spans the Law, two Regulations, several Rules and instruments, and a family of Guidelines. See the interactive hierarchy at /framework/pdpl.

Drafts and pending changes (as at 20 October 2026). The October 2026 draft amendments to the Implementing Regulation are open for comment until 5 November 2026. They would repeal the DPO Appointment Rules and the Register Rules into the Regulation. Draft records also cover the April–May 2025 draft (overtaken), the standards guides and the practising-activities requirements.

Consultation platform. SDAIA's October 2026 project sits on istitlaa.scbc.gov.sa; earlier projects were on istitlaa.ncc.gov.sa.

Some instruments are held in the source library; others must be obtained. SDAIA's own site is often unreachable from outside the Kingdom: the source register records accessible alternates (DLA Piper, the Istitlaa platform, the National Portal).


Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21