On March 19, 2024, the Saudi Data & Artificial Intelligence Authority (SDAIA) requested via a post on X (formerly Twitter) public comments on the draft amendments to the Regulations on personal data transfers. What are the main amendments to the Regulations on personal data transfers? In particular, the amendments provide that other purposes of transfer or disclosure of personal data to entities outside Saudi Arabia are, in accordance with Article 29(1)(d) of the Personal Data Protection Law (PDPL): performing processes necessary for central processing to enable the controller to perform its activities; providing a service or benefit to the data subject; and conducting scientific research
News
Saudi Arabia: SDAIA opens public consultation on amendments to Regulations on personal data transfers
March 22, 2024
Summary
The Saudi Data & Artificial Intelligence Authority (SDAIA) has opened a public consultation for draft amendments to the Regulations on personal data transfers, which include new purposes for transferring personal data outside Saudi Arabia, procedures and standards for assessing data protection levels abroad, and definitions of appropriate safeguards for such transfers. The amendments aim to ensure that the level of personal data protection outside Saudi Arabia does not fall below that stipulated by the Personal Data Protection Law (PDPL) and its implementing regulations. Public comments on the draft amendments are invited until April 18, 2024.