Publication
KSA’s New Game Changing Personal Data Protection Law
On 24 September 2021, the Kingdom of Saudi Arabia (“KSA”) has announced its first standalone personal data protection law (“DP Law”), promulgated by Royal Decree No. M19/1443 (Cabinet Decision No. 98/1443). This long-awaited development is in line with wider international practices in protecting the privacy of individuals and personal data and extends beyond the general principles of privacy and individuals’ personal data that are outlined under Sharia law. This legal briefing shall provide an overview of the most notable features of the DP Law as well as the impact on KSA based businesses and foreign business which are processing personal data of data subjects inside KSA.