Saudi Arabia’s data protection framework continues to evolve, with the Saudi Data and Artificial Intelligence Authority (SDAIA) publishing draft amendments to the Implementing Regulations of the Personal Data Protection Law (PDPL), which are open for public consultation until 5 November 2026. The amendments cover several areas of practical importance for organisations processing personal data in or relating to the Kingdom.
Clyde & Co’s Partner Lamisse Bajunaid and Associate Nadeen Ezzat provide an overview of the key changes, including data localisation requirements, personal data breach notification obligations, enhanced rules for marketing activities and changes to data protection officer and controller registration requirements. The article also considers the practical implications for businesses and the key compliance considerations for organisations as Saudi Arabia’s data protection and regulatory landscape continues to develop.
Read the full article here: https://www.clydeco.com/en/insights/2026/10/sdaia-publishes-draft-amendments-to-the-pdpl
