Data Protection and Privacy 2026

SAUDI ARABIA

Iraq

Jordan

Iran

Kuwait

Qatar

Riyadh

Saudi Arabia

U.A.E.

Law and Practice Contributed by: Alex Saleh, Asad Ahmad, Shahad Alhumaidani and Omar Halbouni GLA & Company

Sudan

Yemen

Contents 1. Legal and Regulatory Framework p.379 1.1 Overview of Data and Privacy-Related Laws p.379 1.2 Rights and Obligations p.380 1.3 Special Categories of Personal Data p.380

1.4 Processing of Personal Data for Research and Development Purposes p.381 1.5 Processing of Personal Data in the Context of Artificial Intelligence p.381 1.6 Data Breach Requirement p.382 1.7 Regulators p.382 1.8 Enforcement Proceedings and Fines p.383 1.9 Enforcement Trends p.383 2. Privacy Litigation p.383 2.1 Privacy Litigation Overview p.383 2.2 Recent Case Law p.384 2.3 Collective Redress Mechanisms p.384 3. Requirements for the Protection and Processing of Non-Personal Data p.385 3.1 Objectives and Scope of Data Regulation p.385 3.2 Interaction of Data Regulation and Data Protection p.385 3.3 Rights and Obligations Under Applicable Data Regulation p.386 3.4 Regulators and Enforcement p.388

4. Sectoral Topics p.389 4.1 Use of Cookies p.389 4.2 Personalised Advertising and Other Online Marketing Practices p.389

4.3 Employment Privacy Law p.389 4.4 Data Protection in M&A p.390 5. International Considerations p.390 5.1 Restrictions on International Data Transfers p.390 5.2 Government Notifications and Approvals p.391 5.3 Data Localisation Requirements p.392 5.4 Blocking Statutes p.392 5.5 Recent Developments p.393

377 CHAMBERS.COM

Powered by