Policy & Legal Updates
Saudi Arabia Consults on Data Protection Implementing Regulation Reforms
The Saudi Data and Artificial Intelligence Authority has opened a public consultation on proposed amendments to the Implementing Regulation of the Personal Data Protection Law. The proposed revisions include changes to breach notifications, data subject access requests, direct marketing consent, and record retention requirements. The consultation closes on 5 November 2026, with the revised rules entering into force 60 days after official gazette publication.
