Wadira — Find your way through Saudi data & privacy law.

Saudi regulatory ecosystem map

An interactive map of how Saudi Arabia's data, cybersecurity and governance regulators connect. The map itself needs JavaScript; the six regulators it charts:

• Saudi Data & AI Authority / National Data Management Office (SDAIA / NDMO) — National authority for data & AI; the PDPL regulator and — via the NDMO — government data governance.
• National Cybersecurity Authority (NCA) — National cybersecurity regulator; ECC/CCC and related controls across government, CNI and cloud.
• Saudi Central Bank (SAMA) — Central bank; its Cyber Security Framework is mandatory for licensed financial institutions.
• Communications, Space & Technology Commission (CST) — Telecom/ICT, cloud and space regulator; CSP tiers and government data localisation.
• Capital Market Authority (CMA) — Capital market regulator; cybersecurity guidelines for Capital Market Institutions (~188), not issuers.
• Ministry of Health (MOH) — Health regulator; health data is PDPL-sensitive, with HIE policies and health data rules.

PDPL · Source register · Applicability matrix

---

Content and register data licensed CC BY 4.0 — cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-07-27