regulations

Comply With the SDAIA National Data Governance Policies & PDPL

Align with Vision 2030 by complying to SDAIA’s National Governance Policies using Seclore’s Data Centric Security Platform

Contact sales

View all regulations

Data Management & Governance

Framework for national data management and governance, ensuring that data produced, received, or dealt with by government and private entities is managed effectively and securely

Personal Data Protection

Personal Data Protection Law,(PDPL) which is a part of the regulations, sets out the rights of data subjects and the obligations of data controllers. This law aims to protect personal data from unauthorized access and misuse

Data Classification & Security Controls

Mandatory classification of data based on its sensitivity and criticality. This helps in applying appropriate security controls to protect data from unauthorized access, disclosure, alteration, and destruction.

What is the SDAIA Personal Data Protection Law?

The Personal Data Protection Law came into power by royal decree on September 14th 2023 with organizations being given a one year grace period to fully comply by September 14th 2024. The PDPL is a comprehensive legal framework designed to safeguard individuals personal data privacy. It was designed and is enforced by the Saudi Data and Artificial intelligence authority.

The PDPL primarily focuses on granting data subjects an expansive set of rights similar to those seen in EU regulations relating to data privacy. Organizations are obligated to implement a set of robust security measures to ensure data is protected from unauthorised access or use. The PDPL envisages a set of strict fines and a stringent set of legal ramifications for non compliance.

Data security and digital trust are the cornerstones of digital transformation which is one of the top priorities of the KSA Vision 2030. The PDPL has large scale implications for businesses operating in Saudi Arabia. It signifies a significant step forward towards establishing a robust data security regime in KSA and puts a large number of technical data security requirements on businesses operating in the country.