After introducing its innovative regulatory framework for cloud
computing in 2018, Saudi Arabia's Communications and
Information Technology Commission (CITC) has issued an update that
contains some notable changes for cloud service providers and
customers alike.
Background
A second version of the Cloud Computing Regulatory Framework (the
Framework) was published on CITC's website on
12 February 2019. It will replace the previous version with effect
from 14 March 2019 to govern the provision of cloud-based IT
services in the Kingdom of Saudi Arabia (KSA).
Summary of changes
Key changes introduced by the update include:
- Reduced scope of
application: The Framework is only intended to bind cloud
service providers (CSPs) who conclude agreements
for cloud services with customers resident or having an address in
KSA. In the previous version, the Framework was also binding on
CSPs owning, operating or offering access to data centres or any
other elements of a
