Saudi Arabia approves law to protect personal data

The Saudi cabinet approved the Personal Data Protection Law on Tuesday.

The Data and Artificial Intelligence Authority (SDAIA) announced that the new law protects the rights related to processing personal data, regulates their sharing between entities, and prevents their misuse. The new law will be implemented within 180 days.

The new law is intended to safeguard any personal data that could be used to identify the user directly or indirectly from unconsented collection and processing. The data includes name, identification number, address, phone number, personal records, financial records, and images, videos or any other identifying data.

The personal data protection law will protect personal data by ensuring its privacy, regulating its sharing, and preventing its abuse.

Abdullah bin Sharaf Al Ghamdi, president of SDAIA, said in a statement that the law would help accelerate the digital transformation process and foster the development of an information-based society.

The digital transformation empowers the private sector, fosters business growth, and attracts foreign investment, he continued.

He emphasized that it is impermissible to use personal means of communication to send marketing or awareness-raising materials to individuals unless consent has been obtained.