Wadira: Find your way through Saudi data & privacy law.

Regulatory reference register

Name: Wadira: Saudi Arabia Regulatory Reference Register
Creator: Raksa.one Limited
License: https://creativecommons.org/licenses/by/4.0/

A live register of every instrument in the regime: name, type, status and issuing authority. Machine-readable register (JSON).

Instruments	Type	Legal status	Issuing authority
Basic Law of Governance (Arts 37 & 40)	Law	Foundational
Sharia (Qur'an & Sunnah)	Framework	Foundational
Personal Data Protection Law (PDPL)	Law	Binding	SDAIA / NDMO
Implementing (Executive) Regulation	Implementing Regulation	Binding	SDAIA / NDMO
Regulation on Personal Data Transfer Outside KSA	Implementing Regulation	Binding	SDAIA / NDMO
Rules for Appointing a DPO	Rule	Binding	SDAIA / NDMO
Rules Governing the National Register of Controllers	Rule	Binding	SDAIA / NDMO
Standard Contractual Clauses (SCCs)	Instrument	Binding	SDAIA / NDMO
Binding Common Rules (BCRs)	Instrument	Binding	SDAIA / NDMO
Rules for Auditing & Inspecting Controllers and Processors	Rule	Binding	SDAIA / NDMO
Rules Governing Issuance of Accreditation Certificates	Rule	Binding	SDAIA / NDMO
Committee Working Rules	Rule	Guidance	SDAIA / NDMO
Privacy Policy (Notice) Guideline	Guideline	Guidance	SDAIA / NDMO
Destruction / Anonymisation / Pseudonymisation Guideline	Guideline	Guidance	SDAIA / NDMO
Personal Data Disclosure Guideline	Guideline	Guidance	SDAIA / NDMO
Records of Processing (RoPA) Guideline	Guideline	Guidance	SDAIA / NDMO
Personal Data Breach Incidents Procedural Guide	Guideline	Guidance	SDAIA / NDMO
Transfer to Non-Adequate Country Guideline	Guideline	Guidance	SDAIA / NDMO
Self-Assessment Guideline (incl. DPO-need tool)	Guideline	Guidance	SDAIA / NDMO
Minimum Personal Data Guideline	Guideline	Guidance	SDAIA / NDMO
Guide to the PDPL for Controllers and Processors	Guideline	Guidance	SDAIA / NDMO
SDAIA Organizational Arrangements	Council of Ministers Resolution	Binding	SDAIA / NDMO
NDMO Data Management & Personal Data Protection Standards	Standard	Binding	SDAIA / NDMO
Freedom of Information Policy	Instrument	Binding	SDAIA / NDMO
Data Classification Policy	Standard	Binding	SDAIA / NDMO
Open Data Policy	Instrument	Binding	SDAIA / NDMO
National Data Index (NDI)	Framework	Guidance	SDAIA / NDMO
NDI: Operational Excellence (OE)	Instrument	Binding	SDAIA / NDMO
Rules for Secondary Use of Data	Rule	Binding	SDAIA / NDMO
NDI: Operational Excellence FAQs	Instrument	Binding	SDAIA / NDMO
Data Sharing Guideline	Guideline	Guidance	SDAIA / NDMO
Data Monetisation Policy	Guideline	Guidance	SDAIA / NDMO
Anti-Cyber Crime Law	Law	Binding	NCA
Essential Cybersecurity Controls (ECC-2:2024)	Framework	Binding	NCA
NCA Cybersecurity Toolkits	Instrument	Guidance	NCA
Cloud Cybersecurity Controls (CCC-2:2024)	Framework	Binding	NCA
Critical Systems Cybersecurity Controls	Framework	Binding	NCA
Operational Technology Cybersecurity Controls	Framework	Binding	NCA
Data Cybersecurity Controls	Framework	Binding	NCA
National Cryptographic Standards	Standard	Binding	NCA
Non-Critical National Infrastructure Cybersecurity Controls (NCNICC-1:2025)	Framework	Binding	NCA
Cybersecurity Organizational Structure Template	Instrument	Guidance	NCA
Regulatory Framework for Licensing Managed Security Operations Centre Services (RFMSOC-1:2024)	Instrument	Guidance	NCA
Saudi Cybersecurity Higher Education Framework (SCyber-Edu-1:2020)	Instrument	Guidance	NCA
Guide to Critical Systems Cybersecurity Controls (CSCC) Implementation	Framework	Guidance	NCA
Operational Technology Cybersecurity Controls: Methodology & Mapping Annex	Framework	Guidance	NCA
National Policy for Managed Security Operations Centres (NPMSOC-1:2024)	Instrument	Guidance	NCA
Organizations’ Social Media Accounts Cybersecurity Controls (OSMACC-1:2021)	Framework	Binding	NCA
Saudi Cybersecurity Workforce Framework (SCyWF-1:2020)	Instrument	Binding	NCA
Telework Cybersecurity Controls (TCC)	Framework	Binding	NCA
Cybersecurity Guidelines for Internet of Things (CGIoT-1:2024)	Guideline	Guidance	NCA
Guide to Organizations’ Social Media Accounts Cybersecurity Controls (OSMACC) Implementation	Guideline	Guidance	NCA
Guide to Telework Cybersecurity Controls (TCC) Implementation	Guideline	Guidance	NCA
Cybersecurity Guidelines for E-commerce Service Providers (CGESP-1:2019)	Guideline	Guidance	NCA
Alignment Guide for the Saudi Cybersecurity Workforce Framework (SCyWF)	Guideline	Guidance	NCA
Guide to Operational Technology Cybersecurity Controls (OTCC) Implementation	Guideline	Guidance	NCA
Cybersecurity Guidelines for E-commerce Consumers (CGEC-1:2019)	Guideline	Guidance	NCA
Guide to Cloud Cybersecurity Controls (CCC) Implementation	Guideline	Guidance	NCA
Guide to Data Cybersecurity Controls (DCC) Implementation	Guideline	Guidance	NCA
Alignment Guide for the Saudi Cybersecurity Higher Education Framework (SCyber-Edu)	Guideline	Guidance	NCA
The Capital Market Law	Law	Binding	CMA
Saudi Central Bank Law	Law	Binding	SAMA
PAYMENT SERVICES PROVIDER REGULATIONS	Regulation	Binding	SAMA
SAMA Rules on Outsourcing (Circular 2389)	Rule	Binding	SAMA
Financial Consumer Protection Principles and Rules	Instrument	Binding	SAMA
Cyber Resilience Fundamental Requirements (CRFR)	Instrument	Binding	SAMA
SAMA 4725	Instrument	Binding	SAMA
SAMA Cyber Security Framework (CSF)	Instrument	Guidance	SAMA
CMA Cybersecurity Guidelines	Guideline	Guidance	CMA
Payment Services Provider Regulatory Guidelines	Guideline	Guidance	SAMA
Global AI Hub Law	Law	Draft	CST
AI Adoption Framework	Framework	Guidance	SDAIA / NDMO
National Occupational Standard Framework for Data & AI	Standard	Guidance	SDAIA / NDMO
Saudi Academic Framework for AI Qualifications	Instrument	Guidance	SDAIA / NDMO
AI Ethics Principles	Guideline	Guidance	SDAIA / NDMO
Generative AI Guidelines: Government & Public	Guideline	Guidance	SDAIA / NDMO
Deepfakes Guidelines	Guideline	Guidance	SDAIA / NDMO
Generative AI Guidelines: Public	Guideline	Guidance	SDAIA / NDMO
Cloud Computing Regulatory Framework	Regulation	Binding	CST
Cybersecurity Regulatory Framework (CRF)	Framework	Binding	CST
CST Licensing	Instrument	Binding	CST
CST Guide for Cloud Computing Service Providers	Guideline	Guidance	CST
Registration Guide in the Qualifying Category	Guideline	Guidance	CST
Health Information Exchange (HIE) Policies	Instrument	Guidance	MOH
MOH Data Governance Policy	Rule	Binding	MOH

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13