Definition
The Saudi law governing how personal data is collected, processed and shared. Mandatory enforcement began on 14 September 2024, with penalties of up to SAR 5 million.
Example
A store explains in its privacy policy why it collects mobile numbers and how it uses them.
Read the full guideCustomer Consent for WhatsApp Messages: Meta's Policy and Saudi Arabia's Data Protection Law
Related Data & Compliance terms
صلاحيات الوصولAccess Control and User RolesSetting what each employee can see and do in the system, such as blocking exports or hiding customer phone numbers, to protect data.مدة الاحتفاظ بالبياناتData RetentionHow long you keep customer data and conversations. It is best set in a written policy, deleting what you no longer need.موافقة صاحب البياناتData Subject ConsentClear permission a person gives for their data to be processed for a specific purpose, which they can withdraw at any time. It is a key basis for direct marketing by message.البيانات الشخصيةPersonal DataAny information that identifies a person directly or indirectly, such as their name, mobile number, address and purchase history.الهيئة السعودية للبيانات والذكاء الاصطناعي سداياSDAIA (Saudi Data and AI Authority)Saudi Arabia's national authority for data and artificial intelligence, which oversees enforcement of the Personal Data Protection Law and its regulations.