Saudi PDPL
The only binding instrument with real teeth over AI in the Kingdom. Any AI system processing personal data of people in Saudi Arabia falls under SDAIA's enforcement powers.
What it is
Saudi Arabia's comprehensive data-protection law, administered by SDAIA, governing collection, processing and cross-border transfer of personal data — including data used to train and run AI systems.
In force 14 September 2023 with a one-year grace period; enforced from 14 September 2024.
Who is affected
The only binding instrument with real teeth over AI in the Kingdom. Any AI system processing personal data of people in Saudi Arabia falls under SDAIA's enforcement powers.
Key obligations
- Lawful basis and purpose limitation for personal data processing
- Restrictions on cross-border transfers
- Data subject rights, breach notification and registration with SDAIA
Recent signals
SDAIA reopens consultation on PDPL implementing-regulation changes
A revised draft adds in-Kingdom data localisation, wider breach-notification triggers and expanded registration duties. Comments close 5 November 2026.
Saudi Arabia launches national AI risk management framework
SDAIA launched an advisory framework giving government and private entities a single method to identify, assess, treat and monitor AI risks.
Related instruments
- SASaudi AI Risk FrameworkAn advisory national reference for government and private entities to identify, assess, treat and monitor AI risks, using a four-s…
- EUGDPR × AIThe EU's data-protection regime remains a primary AI constraint: legal bases for training data, automated-decision rights (Art. 22…
- USTAKE IT DOWN ActRare bipartisan federal AI statute criminalizing publication of non-consensual intimate images, including AI-generated deepfakes, …
- US-STCalifornia AB 2013Requires developers of generative AI systems made available in California to publish documentation of training datasets — sources,…
- US-STUtah AI Policy ActAn early, light-touch state law: companies cannot blame generative AI for consumer-protection violations, regulated professions mu…