Wadira: Find your way through Saudi data & privacy law.

Applicability matrix

Which entity types fall under which frameworks.

Entity typePDPLNDMONDIECCCCCCSCCDCCNCSNCNICCACCLCRFCCSPRDCSRCSFSAMA-PDPLCMAIAHIE
Government agencies✓✓✓✓✓✓✓✓✓
Banks (licensed)✓✓✓✓✓✓
Finance companies and payment providers✓✓✓✓✓
Credit bureaus✓✓✓✓
Insurers✓✓✓✓✓
Capital Market Institutions✓✓✓✓
Tadawul-listed issuers✓✓✓✓
Telecom and ICT licensees✓✓✓✓✓
Cloud service providers (by class)✓✓✓✓✓✓✓
Data centre and colocation operators✓✓✓✓✓✓
Operators of Critical National Infrastructure✓✓✓✓✓✓✓
Govt data partners (private)✓✓✓✓✓
AI developers and deployers✓✓✓✓
Healthcare providers✓✓✓✓✓
Health insurers✓✓✓✓✓
Medical device and pharmaceutical companies✓✓✓
Research and clinical trial sponsors✓✓
E-commerce providers✓✓✓
Employers (HR data)✓✓
Commercial enterprises (in KSA)✓✓✓
Special economic zone entities✓✓
Non-profit organisations✓✓
Foreign entities processing KSA residents' data✓✓

PDPL · NDMO · NDI · ECC · CCC · CSCC · DCC · NCS · NCNICC · ACCL · CRF · CCSPR · DCSR · CSF · SAMA-PDPL · CMA · IA · HIE


Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21