Saudi AI Risk Framework
Advisory today, but issued by the authority that also enforces data protection — so it is the practical benchmark SDAIA will hold AI deployers to. Its structure closely tracks NIST AI RMF and ISO 42001, easing alignment for multinationals.
What it is
An advisory national reference for government and private entities to identify, assess, treat and monitor AI risks, using a four-stage lifecycle, a likelihood-impact matrix, seven principles and seven risk categories.
Published by SDAIA in April 2026; formally launched 14 July 2026. Builds on the AI Ethics Principles (2023) and generative AI guidelines (2024).
Who is affected
Advisory today, but issued by the authority that also enforces data protection — so it is the practical benchmark SDAIA will hold AI deployers to. Its structure closely tracks NIST AI RMF and ISO 42001, easing alignment for multinationals.
Key obligations
- Four-stage risk lifecycle: context, identification, assessment and treatment, monitoring
- Standardised likelihood-impact scoring across entities
- Seven core principles drawn from the 2023 AI Ethics Principles
Recent signals
SDAIA reopens consultation on PDPL implementing-regulation changes
A revised draft adds in-Kingdom data localisation, wider breach-notification triggers and expanded registration duties. Comments close 5 November 2026.
Saudi Arabia launches national AI risk management framework
SDAIA launched an advisory framework giving government and private entities a single method to identify, assess, treat and monitor AI risks.
Related instruments
- SASaudi PDPLSaudi Arabia's comprehensive data-protection law, administered by SDAIA, governing collection, processing and cross-border transfe…
- EUEU AI ActThe world's first comprehensive, risk-based AI law. It bans a set of unacceptable practices (social scoring, manipulative AI, most…
- EUEU Digital OmnibusThe first formal simplification of the AI Act. Adopted July 2026, it delays high-risk obligations to December 2027 (standalone Ann…
- EUAI Liability DirectiveThe Commission withdrew its proposed AI Liability Directive in February 2025, citing no foreseeable agreement. Civil liability for…
- ITItaly AI LawItaly became the first EU member state with a national AI law, layering sector rules (healthcare, work, justice, public administra…