Update On The New Saudi Data Protection Law

After amendments and postponement the new Saudi Personal Data Protection Law Saudi Arabia is scheduled to enter into force later this year. The law seeks to aid in the Kingdom developing a digital infrastructure and a digital economy. The law was initially scheduled to enter into force in March 2022. However, in public consultations substantial concerns were voiced, in particular, concerning restrictive provisions dealing with storage and processing of data outside of Saudi Arabia. The Saudi legislator addressed these concerns in an amendment published on 21 March 2023, which delayed the law's entry into force. The law will enter into force on 14 September 2023 and organization will have until 13 September 2024 to ensure compliance.