The OECD.AI Policy Navigator

Our policy navigator is a living repository from more than 80 jurisdictions and organisations. Use the filters to browse initiatives and find what you are looking for.

Amendments to Personal Data Protection Law

The Personal Data Protection Law (PDPL) of Saudi Arabia (KSA) was recently amended pursuant to Royal Decree No. M/148, dated 05/09/1444H (corresponding to 27 March 2023G) (Amended PDPL). These amendments were preceded by a public consultation launched by the Saudi Data and Artificial Intelligence Authority (SDAIA) in late 2022.

Name in original language

Amendments to Personal Data Protection Law

Initiative overview

The initiative has the following objectives:The Amended PDPL expands the scope under which Controllers could collect personal data from third parties and process it for purposes other than that for which it was originally collected. It also provides additional grounds for Controllers to disclose personal data and introduces an updated regime for personal data transfers outside of KSA.

Name of responsible organisation (in English)

Saudi Data and Artificial Intelligence Authority (SDAIA)

About the policy initiative


Organisation:

  • Saudi Data and Artificial Intelligence Authority (SDAIA)

Category:

  • Regulations, guidelines and standards

Initiative type:

  • Amendment to/repeal of existing legislation

Status:

  • Active

Start Year:

  • 2023

Binding:

  • Binding

Other relevant urls:

—