Saudi Arabia’s (“KSA”) Personal Data Protection Law (“PDPL”) (1)

Saudi Arabia’s Personal Data Protection Law (PDPL) is its first comprehensive national data protection law that regulates the processing and collection of personal data. The law will become fully enforceable on September 14, 2023, and companies have until September 13, 2024, to achieve full compliance.  


The PDPL is designed to protect personal data, regulate data transfers, and applies to any processing by businesses or public entities of personal data performed in Saudi Arabia by any means, including the processing of the personal data of Saudi residents by entities located outside the Kingdom.

Would you like to continue reading? Fill in the required information and receive this E-book.