Wadira: Find your way through Saudi data & privacy law.

Saudi regulatory ecosystem map

An interactive map of how Saudi Arabia's data, cybersecurity and governance regulators connect. The map itself needs JavaScript; the regulators it charts:

• Saudi Data & AI Authority / National Data Management Office (SDAIA / NDMO): National authority for data & AI; the PDPL regulator and, via the NDMO, government data governance.
• National Cybersecurity Authority (NCA): National cybersecurity regulator: issues and enforces controls (ECC, CCC and related sets) for government entities and C
• Saudi Central Bank (SAMA): Central bank; supervises banks, finance companies, payment providers and credit bureaus. Its Cyber Security Framework is
• Communications, Space & Technology Commission (CST): Regulator for telecom and IT, digital content platforms, cloud computing, data centre services, IoT, internet and space.
• Capital Market Authority (CMA): Capital market regulator; regulates listed issuers and 215 Capital Market Institutions. Its cybersecurity Main Controls
• Insurance Authority (IA): Insurance regulator; supervises insurers and insurance service providers, a role previously held by SAMA.
• Ministry of Health (MOH): Health ministry; health data is PDPL sensitive data. This page also lists NHIC, Saudi Health Council, SFDA and research

PDPL · Source register · Applicability matrix

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21