The Saudi Data and AI Authority (SDAIA) has announced amendments to the Regulation on Personal Data Transfer Outside the Kingdom that enunciate clear and detailed provisions and procedures governing the transfer of personal data, to ensure an appropriate level of protection and privacy for data owners in foreign countries.

The regulation contains various articles, such as procedures and standards for evaluating the level of personal data protection outside the Kingdom, other purposes for transferring or disclosing personal data to entities outside the Kingdom, cases in which controllers are exempt from the requirements to comply with the appropriate level of protection and the minimum transfer of personal data, subsequent transfer of personal data, revocation of exemption, and risk assessment of transferring or disclosing personal data to a party outside the Kingdom.

The updated regulation can be viewed at https://sdaia.gov.sa/Documents/RegulationonPersonalDataEN.pdf.

Source: Saudi Press Agency