In brief
Sets out individuals' rights over their personal data, the obligations of those who collect and process it, and the rules for transfers outside the Kingdom.
What it covers
- Data subject rights
- Controller obligations when collecting and processing
- Transfers outside the Kingdom
- Violations and penalties
Timeline
- Issued: Royal Decree M/19 · 9/2/1443H
Full record of amendments and regulations at the official source
Official text at the Bureau of Experts
The authoritative text is in Arabic; the Bureau of Experts publishes English translations for some laws.
Library content is simplified general information for awareness only. It is not legal advice and does not replace the official text. Laws change: always check the official source and consult a lawyer before acting. Library data last reviewed: .