Kingdom of Saudi Arabia Personal Data Protection Law

Issued pursuant to Royal Decree No. M/19 of 9/2/1443 H (corresponding to 16 September 2021),
amended pursuant to Royal Decree No. M/148 dated 5/9/1444H (corresponding to 27 March 2023)).

Saudi PDPL Article 1
Definitions and Terminology
Saudi PDPL Article 2
Scope of Data Processing
Saudi PDPL Article 3
Data Subject Rights
Saudi PDPL Article 4
Prohibition of Certain Rights
Saudi PDPL Article 5
Consent Requirements
Saudi PDPL Article 6
General Processing Conditions
Saudi PDPL Article 7
Specific Processing Conditions
Saudi PDPL Article 8
Data Collection and Access Rights
Saudi PDPL Article 9
Disclosure Restrictions
Saudi PDPL Article 10
Data Collection Methods
Saudi PDPL Article 11
Purpose Limitation
Saudi PDPL Article 12
Privacy Policy Obligations
Saudi PDPL Article 13
Data Collection from the Subject
Saudi PDPL Article 14
Verification and Processing Restrictions
Saudi PDPL Article 15
Non-Disclosure Conditions
Saudi PDPL Article 16
Data Destruction Obligations
Saudi PDPL Article 17
Data Accuracy and Completion
Saudi PDPL Article 18
Data Breach Notifications
Saudi PDPL Article 19
Data Subject Rights Notification
Saudi PDPL Article 20
Impact Assessment
Saudi PDPL Article 21
Regulatory Controls
Saudi PDPL Article 22
Processing Conditions for Specific Purposes
Saudi PDPL Article 23
Exemption Conditions
Saudi PDPL Article 24
Supplementary Regulations
Saudi PDPL Article 25
Awareness-Raising Limits
Saudi PDPL Article 26
Marketing Data Exceptions
Saudi PDPL Article 27
Scientific Research Exceptions
Saudi PDPL Article 28
Prohibition on Identification Copies
Saudi PDPL Article 29
Cross-Border Data Transfer
Saudi PDPL Article 30
Controller Record Maintenance
Saudi PDPL Article 31
the Article 31 was Repealed
Saudi PDPL Article 32
Professional and Non-Profit Exceptions
Saudi PDPL Article 33
Complaint Mechanisms
Saudi PDPL Article 34
Protection from Harsh Penalties
Saudi PDPL Article 35
Exception to Harsh Penalty Protection
Saudi PDPL Article 36
Decision-Making by Competent Authority
Saudi PDPL Article 37
Employee Record Handling
Saudi PDPL Article 38
Law Implementation and Compliance
Saudi PDPL Article 39
Government Record Handling
Saudi PDPL Article 40
Remedies and Compensation
Saudi PDPL Article 41
Confidentiality Protection
Saudi PDPL Article 42
Regulatory Framework Amendments
Saudi PDPL Article 43
Enforcement Date
Scroll to Top