Back to the evidence library

Horizon source briefing

Saudi Data & AI Authority: Personal Data Protection Law and regulations

Official Saudi controller, data-subject, processing and cross-border-transfer framework.

GCC · Digital, AI & CybersecurityDigital, AI & Cybersecurity sector dossierDigital, AI & Cybersecurity research dossierDigital, AI & Cybersecurity current GCC market status and evidence monitorDigital, AI & Cybersecurity across the GCC: country-by-country entry dossier

What the source contributes

Official Saudi controller, data-subject, processing and cross-border-transfer framework.

Primary Saudi source for privacy, processing and international-transfer requirements.

Before using the evidence

Four questions that keep the conclusion honest

  1. 01Which legal activity, applicant type and jurisdiction does “Saudi Data & AI Authority: Personal Data Protection Law and regulations” actually cover?
  2. 02Which approval, filing, fee, eligibility condition or competent authority is stated directly, and which still requires written confirmation?
  3. 03Does the rule apply to GCC · Digital, AI & Cybersecurity, Digital, AI & Cybersecurity sector dossier, Digital, AI & Cybersecurity research dossier, or only to a narrower licence, entity, free zone, product or worker category?
  4. 04The record was reviewed on 2026-10-12; what has Saudi Data & AI Authority changed or superseded since that date?

Where Horizon integrates this source