The Kingdom of Saudi Arabia recently issued its first comprehensive national data protection law. The Personal Data Protection Law will enter into force on March 23, 2022. It regulates the collection, processing, and use of personal data in the Kingdom. Organizations with operations in the Kingdom or those processing data of Saudi residents will have one year to comply with the new requirements. Several requirements contained in the new law surround residency, extraterritoriality, restrictions on Cross-Border Transfers, consent, breach notification, records of processing activities, and more.
