PDPL in Saudi Arabia: what a business holding customer data has to do
Saudi Arabia’s Personal Data Protection Law has been in force since 14 September 2023 and the one-year grace period ended on 14 September 2024. It covers any processing of personal data in the Kingdom, and processing of residents’ data by entities outside it. Fines reach SAR 5,000,000, doubled on repetition.
8 min read