Skip to content
Legislations.
Saudi ArabiaSaudi ArabiaLawLawRoyal Decree No. M/19 of 9/2/1443H, amended by Royal Decree Unverified

Personal Data Protection Law (PDPL)

Saudi Arabia's comprehensive personal data protection law, supervised by SDAIA, governing processing and cross-border transfer of personal data with fines of up to SAR 5 million.

Where it stands

In forceIntroducedCommitteeFloorLawIn force

One-year compliance grace period endedSep 14, 20242 years ago

Body
Council of Ministers (Royal Decree)
In effect since
Sep 14, 20233 years ago
PrivacyData
Official page Source: DLA Piper Data Protection Laws of the World

Timeline

  1. Sep 14, 2024 2 years ago

    One-year compliance grace period ended

  2. Sep 14, 2023 3 years ago

    Entered into force, with Implementing Regulations and Transfer Regulations

  3. Mar 27, 2023 3 years ago

    Amended by Royal Decree No. M/148

  4. Sep 16, 2021 5 years ago

    Issued by Royal Decree No. M/19