On August 15, 2024, the National Competitiveness Center Istitlaa Platform announced that the Saudi Data & Artificial Intelligence Authority (SDAIA) published a draft for Standard Contractual Clauses for the Transfer of Personal Data for public consultation. The Standard Contractual Clauses (SCCs) are one of the appropriate safeguards that controllers and processors may use for transferring data outside of Saudi Arabia. The purpose of the SCCs is to ensure a level of protection of personal data equivalent to the level of protection applied under the Personal Data Protection Law (PDPL) and its Regulations by specifying the obligations of the parties involved in the transfer of personal data
News
Saudi Arabia: SDAIA publishes draft SCCs
September 2, 2024
Summary
The Saudi Data & Artificial Intelligence Authority (SDAIA) released a draft for Standard Contractual Clauses (SCCs) to regulate the international transfer of personal data from Saudi Arabia. The SCCs aim to maintain a level of personal data protection consistent with the Personal Data Protection Law (PDPL) and its Regulations. The draft allows for additional conditions in contracts as long as they don't conflict with the SCCs, PDPL, or its Regulations, and mandates data importers to comply with Saudi laws. The draft includes four sets of SCCs for different data transfer scenarios and was open for public consultation until August 30, 2024.